Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wUods-001T16-0T for pgsql-bugs@arkaria.postgresql.org; Wed, 03 Jun 2026 16:40:33 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wUodq-002Dve-0A for pgsql-bugs@arkaria.postgresql.org; Wed, 03 Jun 2026 16:40:30 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wUoN7-002BlP-34 for pgsql-bugs@lists.postgresql.org; Wed, 03 Jun 2026 16:23:14 +0000 Received: from mail-m6057.netease.com ([210.79.60.57]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.98.2) (envelope-from ) id 1wUoMx-00000000w3E-41oT for pgsql-bugs@postgresql.org; Wed, 03 Jun 2026 16:23:10 +0000 Received: from localhost (unknown [117.20.154.112]) by smtp.qiye.163.com (Hmail) with ESMTP id 40f1fd544 for ; Thu, 4 Jun 2026 00:22:55 +0800 (GMT+08:00) Mime-Version: 1.0 X-QQ-MIME: TCMime 1.0 by Tencent X-Mailer: MailApp Android 7.1.5.10165332 X-QQ-Mailer: MailApp Android 7.1.5.10165332 Subject: Fw: Re: heap_force_common in contrib/pg_surgery/heap_surgery.c has an off by one stack buffer overflow Date: Thu, 4 Jun 2026 00:22:53 +0800 (GMT+08:00) From: =?UTF-8?B?dmlvbGluMDYxM0B0anUuZWR1LmNu?= To: =?UTF-8?B??= Content-Type: multipart/alternative; boundary="----=_Part_0_267995657.1780503775639" Message-Id: <20260604002256.40f1fd544@smtp.qiye.163.com> X-HM-Tid: 0a9e8e4b86d403a2kunm4a345924a3c8 X-HM-MType: 10 X-HM-Spam-Status: e1kfGhgUHx5ZQUpXWQgPGg8OCBgUHx5ZQUlOS1dZFg8aDwILHllBWSg2Ly tZV1koWUFITzdXWRgWCB1ZQUpXWS1ZQUlXWQ8JGhUIEh9ZQVkaGk9PVhlMGUpDT09OQ0tJQlYeHw 5VEwETFhoSFyQUDg9ZV1kYEgtZQVlKSkxVSUtVSk5PVUpKSVlXWRYaDxIVHRRZQVlPS0hVSktISk hNSlVKS0tVSkJLS1kG DKIM-Signature: a=rsa-sha256; b=WmeiERqf4Vnzu3ZAqa2oafWNe6wLUuHiSwMtKZeBznOo3nM/ZfA3UrdHNpQC+2xahri8907tuEoqalDlvxJzLsN+1tQOmPbDgqaZXNQlCvMVtFXUbvDcf+h8H74nGI/kBgFO0Qa2mbpoFBTkCCROlD0NAFHLKe4R1t2n2aecBAI=; s=default; c=relaxed/relaxed; d=tju.edu.cn; v=1; bh=5dOJ7wgl4HHWnQLAdk2qBoJazwP7jUllGIY+Gitsec8=; h=date:mime-version:subject:message-id:from; List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk ------=_Part_0_267995657.1780503775639 Content-Type: text/plain; charset=us-ascii Content-Transfer-Encoding: base64 ------=_Part_0_267995657.1780503775639 Content-Type: text/html; charset=UTF-8 Content-Transfer-Encoding: base64 PGRpdj48YnI+PC9kaXY+PGRpdj48YnI+PC9kaXY+PGRpdj48IS0tZW1wdHlzaWduLS0+PC9kaXY+ PGRpdj48ZGl2IHN0eWxlPSJmb250LXNpemU6MTJweDtwYWRkaW5nOjJweCAwOyIgY2xhc3M9Inht X21haWxfb3JpbmdpbmFsX2Rlc2NyaWJlIj4tLS1PcmlnaW5hbC0tLTwvZGl2PjxkaXYgc3R5bGU9 ImZvbnQtc2l6ZToxMnB4O2JhY2tncm91bmQ6I2YwZjBmMDtjb2xvcjojMjEyMTIxO3BhZGRpbmc6 OHB4IWltcG9ydGFudDtib3JkZXItcmFkaXVzOjRweDtsaW5lLWhlaWdodDoxLjU7Ij48ZGl2IGNs YXNzPSJ4bV9tYWlsX29yaW5naW5hbF9kZXNjcmliZSI+PGI+RnJvbTo8L2I+ICJOb2FoIE1pc2No IiZsdDtub2FoQGxlYWRib2F0LmNvbSZndDs8L2Rpdj48ZGl2IGNsYXNzPSJ4bV9tYWlsX29yaW5n aW5hbF9kZXNjcmliZSI+PGI+RGF0ZTo8L2I+IFdlZCwgSnVuIDMsIDIwMjYgMjM6MjUgUE08L2Rp dj48ZGl2IGNsYXNzPSJ4bV9tYWlsX29yaW5naW5hbF9kZXNjcmliZSI+PGI+VG86PC9iPiAi546L 6LeD5p6XIiZsdDt2aW9saW4wNjEzQHRqdS5lZHUuY24mZ3Q7OzwvZGl2PjxkaXYgY2xhc3M9Inht X21haWxfb3JpbmdpbmFsX2Rlc2NyaWJlIj48Yj5DYzo8L2I+ICJzZWN1cml0eSImbHQ7c2VjdXJp dHlAcG9zdGdyZXNxbC5vcmcmZ3Q7OzwvZGl2PjxkaXYgY2xhc3M9InhtX21haWxfb3JpbmdpbmFs X2Rlc2NyaWJlIj48Yj5TdWJqZWN0OjwvYj4gUmU6IGhlYXBfZm9yY2VfY29tbW9uIGluIGNvbnRy aWIvcGdfc3VyZ2VyeS9oZWFwX3N1cmdlcnkuYyBoYXMgYW4gb2ZmIGJ5IG9uZSBzdGFjayBidWZm ZXIgb3ZlcmZsb3c8L2Rpdj48L2Rpdj48YnI+T24mbmJzcDtTYXQsJm5ic3A7TWF5Jm5ic3A7MjMs Jm5ic3A7MjAyNiZuYnNwO2F0Jm5ic3A7MTE6NTY6NTlBTSZuYnNwOyswODAwLCZuYnNwO+eOi+i3 g+aelyZuYnNwO3dyb3RlOjxicj4mZ3Q7Jm5ic3A7UG9DPGJyPiZndDsmbmJzcDs8YnI+Jmd0OyZu YnNwOyZuYnNwO0NSRUFURSZuYnNwO0VYVEVOU0lPTiZuYnNwO0lGJm5ic3A7Tk9UJm5ic3A7RVhJ U1RTJm5ic3A7cGdfc3VyZ2VyeTxicj4mZ3Q7Jm5ic3A7Jm5ic3A7w6I8YnI+Jmd0OyZuYnNwOyZu YnNwO0NSRUFURSZuYnNwO1RBQkxFJm5ic3A7dnVsbl8wMDVfdCgpPGJyPiZndDsmbmJzcDsmbmJz cDvDojxicj4mZ3Q7Jm5ic3A7Jm5ic3A7SU5TRVJUJm5ic3A7SU5UTyZuYnNwO3Z1bG5fMDA1X3Qm bmJzcDtTRUxFQ1QmbmJzcDtGUk9NJm5ic3A7Z2VuZXJhdGVfc2VyaWVzKDEsJm5ic3A7MjkxKTxi cj4mZ3Q7Jm5ic3A7Jm5ic3A7w6I8YnI+Jmd0OyZuYnNwOyZuYnNwO1NFTEVDVCZuYnNwO2hlYXBf Zm9yY2VfZnJlZXplKCd2dWxuXzAwNV90Jzo6cmVnY2xhc3MsPGJyPiZndDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJz cDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtBUlJBWVsnKDAsJm5ic3A7MjkxKSdd Ojp0aWRbXSk8YnI+Jmd0OyZuYnNwOzxicj4mZ3Q7Jm5ic3A7Jm5ic3A7Jm5ic3A7Jm5ic3A7VGhl Jm5ic3A7ZmluYWwmbmJzcDtzdGF0ZW1lbnQmbmJzcDt0cmlnZ2VycyZuYnNwO3RoZSZuYnNwO2J1 Zy48YnI+Jmd0OyZuYnNwOzxicj4mZ3Q7Jm5ic3A7UmVzdWx0czxicj4mZ3Q7Jm5ic3A7PGJyPiZn dDsmbmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtUaGUmbmJzcDtkZWJ1ZyZuYnNwO2J1aWxkJm5ic3A7 Y3Jhc2hlZCZuYnNwO3dpdGg6PGJyPiZndDsmbmJzcDsmbmJzcDtUUkFQOiZuYnNwO2ZhaWxlZCZu YnNwO0Fzc2VydCgib2Zmbm8mbmJzcDsmbHQ7Jm5ic3A7TWF4SGVhcFR1cGxlc1BlclBhZ2UiKSwm bmJzcDtGaWxlOiZuYnNwOyJoZWFwX3N1cmdlcnkuYyIsJm5ic3A7TGk8YnI+Jmd0OyZuYnNwO25l OiZuYnNwOzIzMTxicj4mZ3Q7Jm5ic3A7Jm5ic3A7c2VydmVyJm5ic3A7Y2xvc2VkJm5ic3A7dGhl Jm5ic3A7Y29ubmVjdGlvbiZuYnNwO3VuZXhwZWN0ZWRseTxicj4mZ3Q7Jm5ic3A7PGJyPiZndDsm bmJzcDsmbmJzcDsmbmJzcDsmbmJzcDtJbiZuYnNwO2EmbmJzcDtyZWxlYXNlJm5ic3A7YnVpbGQs Jm5ic3A7dGhlJm5ic3A7YXNzZXJ0aW9uJm5ic3A7aXMmbmJzcDtyZW1vdmVkJm5ic3A7YW5kJm5i c3A7dGhlJm5ic3A7b3V0Jm5ic3A7b2YmbmJzcDtib3VuZHM8YnI+Jmd0OyZuYnNwOyZuYnNwOyZu YnNwOyZuYnNwO3dyaXRlJm5ic3A7cmVtYWlucy48YnI+PGJyPlRoYW5rcyZuYnNwO2ZvciZuYnNw O3RoZSZuYnNwO3JlcG9ydC4mbmJzcDsmbmJzcDtUaGUmbmJzcDtmdW5jdGlvbiZuYnNwO2lzJm5i c3A7c3VwZXJ1c2VyLW9ubHksJm5ic3A7c28mbmJzcDt0aGlzJm5ic3A7aXMmbmJzcDtub3QmbmJz cDthJm5ic3A7dnVsbi48YnI+UGxlYXNlJm5ic3A7cmVwb3J0Jm5ic3A7dGhlJm5ic3A7b3ZlcmZs b3cmbmJzcDtidWcmbmJzcDt0byZuYnNwO3Bnc3FsLWJ1Z3NAcG9zdGdyZXNxbC5vcmcuPGJyPjxi cj48YnI+PC9kaXY+ ------=_Part_0_267995657.1780503775639--