Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uyFi7-005es8-3C for pgsql-bugs@arkaria.postgresql.org; Mon, 15 Sep 2025 20:22:03 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1uyFi4-00DVqU-PY for pgsql-bugs@arkaria.postgresql.org; Mon, 15 Sep 2025 20:22:01 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uyFNs-00DNeT-4K for pgsql-bugs@lists.postgresql.org; Mon, 15 Sep 2025 20:01:08 +0000 Received: from mahout.postgresql.org ([2001:4800:3e1:1::227]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1uyFNo-0010AF-2c for pgsql-bugs@lists.postgresql.org; Mon, 15 Sep 2025 20:01:08 +0000 DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=postgresql.org; s=20171124; h=Message-ID:Date:Reply-To:Cc:From:To:Subject: MIME-Version:Content-Type:Sender:Content-Transfer-Encoding:Content-ID: Content-Description:In-Reply-To:References; bh=iuruti5CXvOmGSqrNWtPqA0ZwF47eYZ3nt4ESzxznvU=; b=wuo+2G/b9BzRI3v19M45j+DjqG OXjNDVjmxwYIh7KO+Vy66cw2keVpMPt1p26N6auz2uTJcuBVf1tu+RoCkEGoDu36M/jpbpGu2N3cS AWUEVh82DEXbtFHV3tY1D/eaFvmRxyw5mNtAUYAV6CCmLgfjecc1YQlx8JiDCpqVesLPd3WHGEJBj RbLXGEI0lqXaVKpWsUI5ISjNUAooIS+9M2mcCaX3lIvgwMskHlvCh2tMsnhs4FkCWPV7wguxgwRiU 5dIoLeb1P1Za04wbYbbPZ4p5JAkJm+c+OV7UzWsOlCGFe8IdZcJPnrxt82SsrKe1kFQOLzFdisT58 q7C72ztQ==; Received: from wrigleys.postgresql.org ([2a02:16a8:dc51::60]) by mahout.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1uyFNo-001cSA-O6 for pgsql-bugs@lists.postgresql.org; Mon, 15 Sep 2025 20:01:04 +0000 Received: from localhost ([127.0.0.1] helo=wrigleys.postgresql.org) by wrigleys.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1uyFNn-00358O-0X for pgsql-bugs@lists.postgresql.org; Mon, 15 Sep 2025 20:01:03 +0000 Content-Type: multipart/mixed; boundary="===============4099263011645819938==" MIME-Version: 1.0 Subject: BUG #19054: Memory exhaustion vulnerability in PostgreSQL array operations leads to server crash To: pgsql-bugs@lists.postgresql.org From: PG Bug reporting form Cc: sibowu@amazon.com Reply-To: sibowu@amazon.com, pgsql-bugs@lists.postgresql.org Date: Mon, 15 Sep 2025 20:00:12 +0000 Message-ID: <19054-b3e91211012e644a@postgresql.org> X-Auto-Response-Suppress: All Auto-Submitted: auto-generated List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk --===============4099263011645819938== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlIGZvbGxvd2luZyBidWcgaGFzIGJlZW4gbG9nZ2VkIG9uIHRoZSB3ZWJzaXRlOgoKQnVnIHJl ZmVyZW5jZTogICAgICAxOTA1NApMb2dnZWQgYnk6ICAgICAgICAgIHNpYm8gd3UKRW1haWwgYWRk cmVzczogICAgICBzaWJvd3VAYW1hem9uLmNvbQpQb3N0Z3JlU1FMIHZlcnNpb246IDE3LjYKT3Bl cmF0aW5nIHN5c3RlbTogICBtYWMKRGVzY3JpcHRpb246ICAgICAgICAKClBvc3RncmVTUUwncyBh cnJheSBpbXBsZW1lbnRhdGlvbiBjYW4gbGVhZCB0byBzZXJ2ZXIgY3Jhc2hlcyBkdWUgdG8KdW5j b250cm9sbGVkIG1lbW9yeSBjb25zdW1wdGlvbiBkdXJpbmcgYXJyYXkgb3BlcmF0aW9ucy4gV2hl biBwZXJmb3JtaW5nCmNvbnRpbnVvdXMgYXJyYXkgbW9kaWZpY2F0aW9ucyB3aXRoaW4gYSBsb29w LCB0aGUgc2VydmVyIGV2ZW50dWFsbHkgZXhoYXVzdHMKYXZhaWxhYmxlIG1lbW9yeSBhbmQgY3Jh c2hlcywgYWZmZWN0aW5nIGFsbCBjb25uZWN0ZWQgc2Vzc2lvbnMuCnBzcWwgKDE3LjYpClR5cGUg ImhlbHAiIGZvciBoZWxwLgpETwokJApERUNMQVJFCiAgYV8xICB0ZXh0W107CiAgYSB0ZXh0Owog IGkgYmlnaW50IGRlZmF1bHQgMTsKQkVHSU4KICBhIDo9IHJlcGVhdCgnQScscG93KDIsMjkpOjpp bnQpOwogIHdoaWxlIHRydWUKICBsb29wCiAgICBhXzFbaV0gOj0gYTsKICAgIGkgOj0gaSArIDE7 CiAgRU5EIExPT1A7CkVORAokJDsKCnNlcnZlciBjbG9zZWQgdGhlIGNvbm5lY3Rpb24gdW5leHBl Y3RlZGx5CiAgICAgICAgVGhpcyBwcm9iYWJseSBtZWFucyB0aGUgc2VydmVyIHRlcm1pbmF0ZWQg YWJub3JtYWxseQogICAgICAgIGJlZm9yZSBvciB3aGlsZSBwcm9jZXNzaW5nIHRoZSByZXF1ZXN0 LgpUaGUgY29ubmVjdGlvbiB0byB0aGUgc2VydmVyIHdhcyBsb3N0LiBBdHRlbXB0aW5nIHJlc2V0 OiBGYWlsZWQuClRoZSBjb25uZWN0aW9uIHRvIHRoZSBzZXJ2ZXIgd2FzIGxvc3QuIEF0dGVtcHRp bmcgcmVzZXQ6IEZhaWxlZC4KIT8+IHF1aXQKCg== --===============4099263011645819938==--