agora inbox for pgsql-committers@postgresql.orghelp / color / mirror / Atom feed
pgsql: Use palloc_array() in pltcl and plperl to avoid overflow 6+ messages / 1 participants [nested] [flat]
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ master Details ------- https://git.postgresql.org/pg/commitdiff/776467301ea9edff9d1f5be975a5da6b2229ac77 Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 26 +++++++++++++------------- src/pl/tcl/pltcl.c | 16 ++++++++-------- 3 files changed, 24 insertions(+), 24 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ REL_19_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/a1c1727cb400b8ae61a13844d7e22ef38e7da79b Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 26 +++++++++++++------------- src/pl/tcl/pltcl.c | 16 ++++++++-------- 3 files changed, 24 insertions(+), 24 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ REL_18_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/028ee716a7902bd2a68843a5d317a6821a0500e2 Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 38 +++++++++++++++++++------------------- src/pl/tcl/pltcl.c | 20 ++++++++++---------- 3 files changed, 32 insertions(+), 32 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ REL_17_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/b56cc7deb9af972226f7d6259248e00eb124069f Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 38 +++++++++++++++++++------------------- src/pl/tcl/pltcl.c | 20 ++++++++++---------- 3 files changed, 32 insertions(+), 32 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ REL_16_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/8bbdc054043af64add7ac4ec544efb1219d9901d Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 38 +++++++++++++++++++------------------- src/pl/tcl/pltcl.c | 20 ++++++++++---------- 3 files changed, 32 insertions(+), 32 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
* pgsql: Use palloc_array() in pltcl and plperl to avoid overflow @ 2026-08-10 13:41 Noah Misch <noah@leadboat.com> 0 siblings, 0 replies; 6+ messages in thread From: Noah Misch @ 2026-08-10 13:41 UTC (permalink / raw) To: pgsql-committers@lists.postgresql.org Use palloc_array() in pltcl and plperl to avoid overflow Some of these could overflow on 32-bit systems with the right input. Convert all cases where we called palloc() with multiplication to fix them. Not all of them were bugs, but it's better to be safe than sorry. Reported-by: Tulya Project, Team Dhiutsa, Bitecope Technologies Private Ltd Backpatch-through: 14 Security: CVE-2026-14677 Branch ------ REL_15_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/1eb0d53804a42b9d2bcc645bbd4ec75fd7c5291a Author: Heikki Linnakangas <heikki.linnakangas@iki.fi> Modified Files -------------- src/pl/plperl/SPI.xs | 6 +++--- src/pl/plperl/plperl.c | 38 +++++++++++++++++++------------------- src/pl/tcl/pltcl.c | 20 ++++++++++---------- 3 files changed, 32 insertions(+), 32 deletions(-) ^ permalink raw reply [nested|flat] 6+ messages in thread
end of thread, other threads:[~2026-08-10 13:41 UTC | newest] Thread overview: 6+ messages (download: mbox mbox.gz follow: Atom feed) -- links below jump to the message on this page -- 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com> 2026-08-10 13:41 pgsql: Use palloc_array() in pltcl and plperl to avoid overflow Noah Misch <noah@leadboat.com>
This inbox is served by agora; see mirroring instructions for how to clone and mirror all data and code used for this inbox