Re: pg17.3 PQescapeIdentifier() ignores len
От | Ranier Vilela |
---|---|
Тема | Re: pg17.3 PQescapeIdentifier() ignores len |
Дата | |
Msg-id | CAEudQApv_mN8-w6RBiP22GUNwxbrr=r__CbzVFn8gWG3V4LLsQ@mail.gmail.com обсуждение исходный текст |
Ответ на | Re: pg17.3 PQescapeIdentifier() ignores len (Tom Lane <tgl@sss.pgh.pa.us>) |
Список | pgsql-hackers |
Em qui., 13 de fev. de 2025 às 16:05, Tom Lane <tgl@sss.pgh.pa.us> escreveu:
Ranier Vilela <ranier.vf@gmail.com> writes:
> Interesting, Coverity has some new reports regarding PQescapeIdentifier.
> CID 1591290: (#1 of 1): Out-of-bounds access (OVERRUN)
> 2. alloc_strlen: Allocating insufficient memory for the terminating null of
> the string. [Note: The source code implementation of the function has been
> overridden by a builtin model.]
That's not new, we've been seeing those for awhile. I've been
ignoring them on the grounds that (a) if the code actually had such a
problem, valgrind testing would have found it, and (b) the message is
saying in so many words that they're ignoring our code in favor of
somebody's apparently-inaccurate model of said code.
Thanks Tom, extra care is needed when analyzing these reports.
best regards,
Ranier Vilela
В списке pgsql-hackers по дате отправления: