Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1r1shG-00E7cC-KI for pgsql-hackers@arkaria.postgresql.org; Sat, 11 Nov 2023 18:27:06 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1r1shF-0082cT-0j for pgsql-hackers@arkaria.postgresql.org; Sat, 11 Nov 2023 18:27:05 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1r1shE-0082cL-NR for pgsql-hackers@lists.postgresql.org; Sat, 11 Nov 2023 18:27:04 +0000 Received: from feynman.df7cb.de ([195.49.152.168]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1r1shA-005vvI-GI for pgsql-hackers@lists.postgresql.org; Sat, 11 Nov 2023 18:27:04 +0000 Received: from msg.df7cb.de (unknown [IPv6:2a02:908:1482:3660:2ae7:2867:64d8:87dc]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-256) server-signature ECDSA (P-384) server-digest SHA384) (Client did not present a certificate) by feynman.df7cb.de (Postfix) with ESMTPSA id 4SSPKv4hnJz3FDS; Sat, 11 Nov 2023 19:26:59 +0100 (CET) Date: Sat, 11 Nov 2023 19:26:59 +0100 From: Christoph Berg To: Thomas Munro Cc: pgsql-hackers@lists.postgresql.org, Michael Paquier Subject: Re: pgsql: Don't trust unvalidated xl_tot_len. Message-ID: References: MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk Re: Thomas Munro > But then why does that only happen on the salsa build, > not on the apt.postgresql.org one? The build chroots there have postgresql-NN already installed so extension builds don't have to download 7 PG versions over and over. My guess would be that that's the difference and it's using some pg_config from /usr/bin or /usr/lib/postgresql/*/bin. I can confirm that it's also failing in my local chroots if none of the postgresql-* packages are preinstalled. Christoph