Re: pg17.3 PQescapeIdentifier() ignores len

Поиск
Список
Период
Сортировка
От Ranier Vilela
Тема Re: pg17.3 PQescapeIdentifier() ignores len
Дата
Msg-id CAEudQApv_mN8-w6RBiP22GUNwxbrr=r__CbzVFn8gWG3V4LLsQ@mail.gmail.com
обсуждение исходный текст
Ответ на Re: pg17.3 PQescapeIdentifier() ignores len  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
Em qui., 13 de fev. de 2025 às 16:05, Tom Lane <tgl@sss.pgh.pa.us> escreveu:
Ranier Vilela <ranier.vf@gmail.com> writes:
> Interesting, Coverity has some new reports regarding PQescapeIdentifier.

> CID 1591290: (#1 of 1): Out-of-bounds access (OVERRUN)
> 2. alloc_strlen: Allocating insufficient memory for the terminating null of
> the string. [Note: The source code implementation of the function has been
> overridden by a builtin model.]

That's not new, we've been seeing those for awhile.  I've been
ignoring them on the grounds that (a) if the code actually had such a
problem, valgrind testing would have found it, and (b) the message is
saying in so many words that they're ignoring our code in favor of
somebody's apparently-inaccurate model of said code.
Thanks Tom, extra care is needed when analyzing these reports.

best regards,
Ranier Vilela

В списке pgsql-hackers по дате отправления: