From: Jeremy Evans <code@jeremyevans.net>
To: Michael Paquier <michael@paquier.xyz>
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #15367: Crash in pg_fe_scram_free when using foreign tables
Date: Fri, 7 Sep 2018 11:50:03 -0700
Message-ID: <20180907185003.GJ17425@jeremyevans.local> (raw)
In-Reply-To: <20180907181522.GB32058@paquier.xyz>
References: <153626613985.23143.4743626885618266803@wrigleys.postgresql.org>
<20180906215836.GP2726@paquier.xyz>
<20180906222843.GF17425@jeremyevans.local>
<20180907165103.GH17425@jeremyevans.local>
<20180907175518.GI17425@jeremyevans.local>
<20180907181522.GB32058@paquier.xyz>
On 09/07 11:15, Michael Paquier wrote:
> On Fri, Sep 07, 2018 at 10:55:18AM -0700, Jeremy Evans wrote:
> > Here's the backtrace:
> >
> > #5 0x000017c20a6b8b00 in pg_fe_scram_free (opaq=0x17c223712000) at fe-auth-scram.c:127
> > #6 0x000017c20a6b9d20 in pqDropConnection (conn=0x17c1dac61800, flushInput=1 '\001') at fe-connect.c:479
> > #7 0x000017c20a6bf95e in closePGconn (conn=0x17c1dac61800) at fe-connect.c:3710
> >
> > Hopefully this helps. If you need more information, please let me know.
>
> Thanks. This fails when freeing the password field in fe_scram_state.
> I have a question: does your password use non-ASCII characters which
> could make SASLprep to be run on the password string? The result string
> from pg_saslprep allocates a new string for any results returned by
> reading the code, I am wondering if we could be missing something..
No, the user mapping password is comprised of hex-ascii characters: [0-9a-f]{16}
In case it helps, here's the content of opaq from gdb (with the specific
strings cleared).
print *((fe_scram_state *) opaq)
{
state = FE_SCRAM_FINISHED,
username = 0x17c267526380 "...",
password = 0x17c1ee153398 <Address 0x17c1ee153398 out of bounds>,
SaltedPassword = 0x17c223712018 "...",
client_nonce = 0x17c267529f60 "...",
client_first_message_bare = 0x17c223711da0 "...",
client_final_message_without_proof = 0x17c271ca19c0 "...",
server_first_message = 0x17c1ea48a400 "...",
salt = 0x17c2675261c0 "...",
saltlen = 16,
iterations = 4096,
nonce = 0x17c2179e9880 "...",
server_final_message = 0x17c271ca1a40 "...",
ServerSignature = 0x17c223712078 "..."
}
Thanks,
Jeremy
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: code@jeremyevans.net, michael@paquier.xyz, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #15367: Crash in pg_fe_scram_free when using foreign tables
In-Reply-To: <20180907185003.GJ17425@jeremyevans.local>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox