Re: small fix to possible null pointer dereference in byteaout() varlena.c
От
Grzegorz Jaśkiewicz
Тема
Re: small fix to possible null pointer dereference in
byteaout() varlena.c
Дата
Msg-id
AANLkTi=u9vVNgeGeXaGpkA-FjDQjBu_2wp+GNWHD0ihK@mail.gmail.com
Ответ на
Список
Дерево обсуждения
small fix to possible null pointer dereference in byteaout() varlena.c Grzegorz Jaśkiewicz <gryzman@gmail.com>
Re: small fix to possible null pointer dereference in byteaout() varlena.c Tom Lane <tgl@sss.pgh.pa.us>
Re: small fix to possible null pointer dereference in
byteaout() varlena.c Grzegorz Jaśkiewicz <gryzman@gmail.com>
Re: small fix to possible null pointer dereference in byteaout() varlena.c Tom Lane <tgl@sss.pgh.pa.us>
Re: small fix to possible null pointer dereference in
byteaout() varlena.c Robert Haas <robertmhaas@gmail.com>
Re: small fix to possible null pointer dereference in
byteaout() varlena.c Grzegorz Jaśkiewicz <gryzman@gmail.com>
2010/9/28 Tom Lane : > Grzegorz Jaśkiewicz writes: >> It would crash if input is of unrecognized format. Probably than >> there's going to be more problems to be concerned with, but just in >> case, don't crash in > > I'm not sure why you think this is a good change, but it would break > things: in particular, the code would fail to null-terminate the string > in the hex-output case. Also, the case that you seem to be trying to > defend against can't happen because elog(ERROR) doesn't return. > ... rp = result = NULL; /* keep compiler quiet */ } *rp = '\0'; .... this strikes me as a clear case of possible null pointer dereference, wouldn't you agree ? I know the case is very corner-ish, but still valid imo. -- GJ
В списке pgsql-hackers по дате отправления