Horton

Fix integer-overflow problem in intarray's g_int_decompress().

Tom Lane <tgl@sss.pgh.pa.us>

View on postgr.es
Commit: 9034a2d5123498104ef1e515c0b56d70d98d0ce2
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2024-01-07T20:19:50Z
Releases: 17.0 
Fix integer-overflow problem in intarray's g_int_decompress().

An array element equal to INT_MAX gave this code indigestion,
causing an infinite loop that surely ended in SIGSEGV.  We fixed
some nearby problems awhile ago (cf 757c5182f) but missed this.

Report and diagnosis by Alexander Lakhin (bug #18273); patch by me

Discussion: https://postgr.es/m/18273-9a832d1da122600c@postgresql.org

Files

PathChange+/−
contrib/intarray/data/test__int.data modified +1 −0
contrib/intarray/expected/_int.out modified +17 −16
contrib/intarray/_int_gist.c modified +6 −4
contrib/intarray/sql/_int.sql modified +3 −2

Discussion