From: Michael Paquier <michael@paquier.xyz>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Daniel Gustafsson <daniel@yesql.se>
Cc: 13952878799@163.com
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #19092: scram_free() will free on address which was not malloc()-ed in pg_scram_mech
Date: Thu, 23 Oct 2025 09:29:19 +0900
Message-ID: <aPl235F3k3ZDeAfj@paquier.xyz> (raw)
In-Reply-To: <494078.1761059179@sss.pgh.pa.us>
References: <19092-b06adfd70ddcd2ab@postgresql.org>
<64F1394B-E765-4291-91CF-E6CFE019D195@yesql.se>
<494078.1761059179@sss.pgh.pa.us>
On Tue, Oct 21, 2025 at 11:06:19AM -0400, Tom Lane wrote:
> We'd really need to see a concrete example to decide whether this is
> a PG bug or user error. I think the SASL stuff is sufficiently poorly
> tested that it could be a previously-unknown PG bug, but it's not clear.
[ .. double-checking the code .. ]
FWIW, I doubt that this is something we need to worry about and I
suspect that there is no action item here. dblink and WAL receivers
do their stuff so as the main backend code does not link with libpq,
and I doubt that we'd ever want to enter in the territory where
FRONTEND becomes a thing in libpq.
Of course, I may prove wrong.
> So: test case, please.
Yes.
--
Michael
Attachments:
[application/pgp-signature] signature.asc (832B, ../aPl235F3k3ZDeAfj@paquier.xyz/2-signature.asc)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: michael@paquier.xyz, tgl@sss.pgh.pa.us, daniel@yesql.se, 13952878799@163.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #19092: scram_free() will free on address which was not malloc()-ed in pg_scram_mech
In-Reply-To: <aPl235F3k3ZDeAfj@paquier.xyz>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox