Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rXSVl-00AlzK-0i for pgsql-hackers@arkaria.postgresql.org; Tue, 06 Feb 2024 20:57:45 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1rXSVk-006feK-8o for pgsql-hackers@arkaria.postgresql.org; Tue, 06 Feb 2024 20:57:44 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1rXSVj-006feC-WB for pgsql-hackers@lists.postgresql.org; Tue, 06 Feb 2024 20:57:44 +0000 Received: from mail-io1-xd2f.google.com ([2607:f8b0:4864:20::d2f]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1rXSVh-005QI2-9U for pgsql-hackers@lists.postgresql.org; Tue, 06 Feb 2024 20:57:42 +0000 Received: by mail-io1-xd2f.google.com with SMTP id ca18e2360f4ac-7bed9c7d33fso262473439f.1 for ; Tue, 06 Feb 2024 12:57:41 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1707253060; x=1707857860; darn=lists.postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=sgQ5PcQ/WTsd0Stt1h/eFQ5U0eRfV/6VeJR9Zqebs94=; b=AYrvE6rtD+8TH5YZRTou2h/YfJmyltr80y9xZSrNy7tn7ttCjvPdF9S/4FRCQTkt26 aVCikFI8Vg0Jl6EMtTCbqr7UttBS8x9ROpS6BCazg05p63/4MyozGIL1d0B2wilAEjTi PwAJ/fbWL1WAuTjEaEASYzTZWU8gE2sE02Glaq767gc9gHFpvyMBprRZtsJ0WvURgeDh meJxCnKrp4McKIVxz4UzSQL5IhjH4luYDTcm/JoVemRG+1/82EzBOGa9q/9FN4EXO8Fq /UaMls5RXq1OfYZ7fTJcYXdWRlc9tLxOG7lQL6/jBMfExT2artSp2Fd5gUOcY5kGTPom LByw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1707253060; x=1707857860; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:cc:to:from:date:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=sgQ5PcQ/WTsd0Stt1h/eFQ5U0eRfV/6VeJR9Zqebs94=; b=EGLoRLBIbNZgEpuXRAqc45Qgz+TtiPWujEDZmdkOGxxiUzIBSc1y87k3qrejrOqDDd vFRZqm/J44/zrpo/X1vIEFtld4TBku/C0JMxQ4YlrEnYy6Os7CALV7A3pEJDrF4OuJF8 +a2DxEG/FN89VQPOf69FufIixKOXU7Y+q364PV3xYMNSpS5XNicqhiLgkH07Vc4C3hFl 8pBrKGP+AlCosGCAe4GOGwhFMJjkB5U6ixaD/95S2j42qJRax4eGfmkNOx7LDj+ZC1Oy L1cPiuzUl69uYU8URKJ3WYnSQPBSQ3/DptwS+K6Z7djoU5uWVej9AC5gEhE4P1hvWZzj s/Nw== X-Gm-Message-State: AOJu0YxHckgEcq8YBf3yRF2Lva32/f6g2gioT/xjc0jIqVcdlPnNqbm0 VRQZg6T1wjepfpk5foI3+hO+zBBqnTKTdWX8wx0GsTrMRAWU3asi X-Google-Smtp-Source: AGHT+IFUY81vrMyd3HAhvhnKFDt5aW3H4qdcpVKO8irBGOeey/BZI0uzP3Ela3jH8do3us7KHBdoeQ== X-Received: by 2002:a6b:da14:0:b0:7bf:de84:c354 with SMTP id x20-20020a6bda14000000b007bfde84c354mr4028158iob.21.1707253060179; Tue, 06 Feb 2024 12:57:40 -0800 (PST) X-Forwarded-Encrypted: i=0; AJvYcCV8QZIVVT+ZXS8UC5wOixkcmzaahluViu33wHhzaUbnyyO4JIj/ZG5jW9zsTPXGHfv0qK/osexzivBhMIo9bjp9QqDptbDJHaGif5Z0lkJTxXA/ Received: from nathanxps13 (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id f12-20020a056602038c00b007bf8af1eacasm636677iov.18.2024.02.06.12.57.39 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Tue, 06 Feb 2024 12:57:39 -0800 (PST) Date: Tue, 6 Feb 2024 14:57:38 -0600 From: Nathan Bossart To: Tom Lane Cc: Mats Kindahl , pgsql-hackers@lists.postgresql.org Subject: Re: glibc qsort() vulnerability Message-ID: <20240206205738.GC3891538@nathanxps13> References: <508821.1707232276@sss.pgh.pa.us> <20240206205305.GB3891538@nathanxps13> <642084.1707252958@sss.pgh.pa.us> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <642084.1707252958@sss.pgh.pa.us> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, Feb 06, 2024 at 03:55:58PM -0500, Tom Lane wrote: > A comparison routine that is not is probably broken, agreed. > I didn't look through the details of the patch --- I was more > curious whether we had a version of the qsort bug, because > if we do, we should fix that too. +1 -- Nathan Bossart Amazon Web Services: https://aws.amazon.com