Fix PQsetvalue() to avoid possible crash when adding a new tuple.

Tom Lane <tgl@sss.pgh.pa.us>

Commit: 64207122a241282189451fdcbab3f5e2a6e1e1b1
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2011-07-21T16:24:48Z
Releases: 9.1.0
Fix PQsetvalue() to avoid possible crash when adding a new tuple.

PQsetvalue unnecessarily duplicated the logic in pqAddTuple, and didn't
duplicate it exactly either --- pqAddTuple does not care what is in the
tuple-pointer array positions beyond the last valid entry, whereas the
code in PQsetvalue assumed such positions would contain NULL.  This led
to possible crashes if PQsetvalue was applied to a PGresult that had
previously been enlarged with pqAddTuple, for instance one built from a
server query.  Fix by relying on pqAddTuple instead of duplicating logic,
and not assuming anything about the contents of res->tuples[res->ntups].

Back-patch to 8.4, where PQsetvalue was introduced.

Andrew Chernow

Files

PathChange+/−
src/interfaces/libpq/fe-exec.c modified +4 −23