Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gVohx-00008R-3w for pgsql-bugs@arkaria.postgresql.org; Sun, 09 Dec 2018 02:20:37 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1gVohv-0006oy-Cg for pgsql-bugs@arkaria.postgresql.org; Sun, 09 Dec 2018 02:20:35 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gVohv-0006oY-22 for pgsql-bugs@lists.postgresql.org; Sun, 09 Dec 2018 02:20:35 +0000 Received: from wout2-smtp.messagingengine.com ([64.147.123.25]) by makus.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA1:256) (Exim 4.89) (envelope-from ) id 1gVohs-00064o-5c for pgsql-bugs@lists.postgresql.org; Sun, 09 Dec 2018 02:20:33 +0000 Received: from compute4.internal (compute4.nyi.internal [10.202.2.44]) by mailout.west.internal (Postfix) with ESMTP id 7BAAFC0E; Sat, 8 Dec 2018 21:20:30 -0500 (EST) Received: from mailfrontend1 ([10.202.2.162]) by compute4.internal (MEProxy); Sat, 08 Dec 2018 21:20:30 -0500 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=paquier.xyz; h= date:from:to:cc:subject:message-id:references:mime-version :content-type:in-reply-to; s=fm3; bh=b+leO4J/DAtlQyP3dFprJQ/dMU8 KoJn0l3x+CcH2TCA=; b=NLRkJ4Pkzpk2UOZog6jSc0oVdJSlL0mMmC3D7dn9GIU xUhbklvADVgAp5Mohu49yYUPPepehXDTMRx8lNqUn29vR24IncdxP77cSjeEUUdV RkomkHL7Igw5NfEZs2Coy6OxFxOvEJmMpSiy/0km9crYGRWNQm1GVhJwQTVj8viU lsPSH2b+kyhaJ7EGsK+my5LeCkN3q9npCu/37ZRs5LrshK5A8fjFkl3DZF85ibtT +db8VNe1NQKfvlMQh5ITyX4jVjx3sFynbonjpK5I7mWt6dydzAQNqtpmbUT8p1BF AItvtYNcnm+m+21OOoT9jWcC+xktotM39X9/wmsgKRw== DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d= messagingengine.com; h=cc:content-type:date:from:in-reply-to :message-id:mime-version:references:subject:to:x-me-proxy :x-me-proxy:x-me-sender:x-me-sender:x-sasl-enc; s=fm1; bh=b+leO4 J/DAtlQyP3dFprJQ/dMU8KoJn0l3x+CcH2TCA=; b=i33ev4XXmP6JbKk4ZBRkzG aTiFrbsbr7tTGG0e1BZJLF3Pavx5F4awRjQcfsoxHqaODpVAJZUOCyggtndgG2dH ON6AtcbP6AFy3PNERRE/+o10qHLn1LegElk20u201HALUwJ+kCRuN3PIVbe5gCON ZSnFBIkX9gu/M7d5YtvLPLhRjM0Tl5gFfXb0kIcO9ZpzgJPU1BYEGN4nk8Y933Mz NkIjFRxNkpt+F/Q7KPksR7liMe+UZndxKtBvl/bbjNpamRiVRS8xOZ/9ALi2y+RW 9XE7y6K1TWhFZa0baTlNnknRKY9I2nhdnRkJjhLDroFyWPxjFKGi0qsBJxRf4yNg == X-ME-Sender: X-ME-Proxy-Cause: gggruggvucftvghtrhhoucdtuddrgedtkedrudegvddguddtucetufdoteggodetrfdotf fvucfrrhhofhhilhgvmecuhfgrshhtofgrihhlpdfquhhtnecuuegrihhlohhuthemucef tddtnecufghrlhcuvffnffculdejtddmnecujfgurhepfffhvffukfhfgggtuggjsehgtd erredttddvnecuhfhrohhmpefoihgthhgrvghlucfrrghquhhivghruceomhhitghhrggv lhesphgrqhhuihgvrhdrgiihiieqnecukfhppeduudekrddvgedurddvhedurddukeehne curfgrrhgrmhepmhgrihhlfhhrohhmpehmihgthhgrvghlsehprghquhhivghrrdighiii necuvehluhhsthgvrhfuihiivgeptd X-ME-Proxy: Received: from paquier.xyz (mp76f1fbb9.ap.nuro.jp [118.241.251.185]) by mail.messagingengine.com (Postfix) with ESMTPA id 3BE3DE48FA; Sat, 8 Dec 2018 21:20:27 -0500 (EST) Date: Sun, 9 Dec 2018 11:20:24 +0900 From: Michael Paquier To: PanBian Cc: Tom Lane , pgsql-bugs@lists.postgresql.org Subject: Re: BUG #15540: Use after release in ExecuteTruncateGuts Message-ID: <20181209022024.GD1833@paquier.xyz> References: <15540-01078812338195c0@postgresql.org> <31125.1544198945@sss.pgh.pa.us> <20181209005617.GA65607@bp> MIME-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha512; protocol="application/pgp-signature"; boundary="gMR3gsNFwZpnI/Ts" Content-Disposition: inline In-Reply-To: <20181209005617.GA65607@bp> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --gMR3gsNFwZpnI/Ts Content-Type: text/plain; charset=us-ascii Content-Disposition: inline Content-Transfer-Encoding: quoted-printable On Sun, Dec 09, 2018 at 08:56:17AM +0800, PanBian wrote: > Yes. I write a static analysis tool. It can find functions that release > memory or other resources. Let's call them free-like functions. With such > free-like functions, the tool then performs data flow analysis to find=20 > use-after-free bugs. Of course, we can feed those free-like functions to > other static analyzers such as Coverity. I believe it will work too. Interesting. Did you release this stuff in the open? I could be very interesting to get that plugged in more easily with Postgres. Community runs Coverity as well. The reports are not public still if that helps in reporting real issues and not only false positives that would be nice. -- Michael --gMR3gsNFwZpnI/Ts Content-Type: application/pgp-signature; name="signature.asc" -----BEGIN PGP SIGNATURE----- iQIzBAABCgAdFiEEG72nH6vTowiyblFKnvQgOdbyQH0FAlwMe+gACgkQnvQgOdby QH0uUA/9EEgdsDb2Iu1Rpqi2yBy0V3CZ076ICbdUheXYUpZRKITypxwM+WfGdqVz nTedvofPvzK9ckPhamvKBaJxpQXp7021Wb4PGlqhVOcebGtUQjMMD5mK3vWjScEn qrdlKFycCDC/8B4LesuTvWv1pnrj/FxBPB/90jFXg9wA8z7ZAEJ+lr33VgrjLmzV XgNLIqIp0HWGVVYnTRRWaXnOhkv7unb0VUs2xN09qLWrfwhtzDh9pfb8SwVcSNOF eXl5jiexP7aRHFo4xXXFCFtzaDznZO7Of3eZHFKtBpnSlvTzba9m3hGYlSMOAHQn r+IVM/9slm73MLUhmPGbffXqfMHKDP9ORStR9pACPjo41jUfQtoi6GwznHqWvL84 a+FJ2ZghB2vuiBWV1Y9y5Xm0BseAJXMNdIEBySwcPNNn7Ipta603+kbEMElpmkYV brBPHbltXnNsa39qR6HqqMLumq6ibTve8cYmZXVlN0LEgjYkHatYuV9ecG32bc4l qgDR2Lgf6yG2NPj8nZQ97by/IxY+T+zA68f6jC//szpmq/mzo6GOCAZnV2mPk2f2 Wam1bZcDKf6PL7ZXWQsqYZuokPx/n0lCzUyBYnPT68MQayCJkdMOA1jgRFe6U/bN WH2sVYYF3GlSTXgs1kvvQBwi//WXLBnDVgVB1r0IPMZ+WnpL4S8= =uf3L -----END PGP SIGNATURE----- --gMR3gsNFwZpnI/Ts--