BUG #17935: Incorrect memory access in fuzzystrmatch/difference()
The Post Office <noreply@postgresql.org>
From: PG Bug reporting form <noreply@postgresql.org>
To: pgsql-bugs@lists.postgresql.org
Cc: exclusion@gmail.com
Date: 2023-05-16T13:00:00Z
Lists: pgsql-bugs
The following bug has been logged on the website:
Bug reference: 17935
Logged by: Alexander Lakhin
Email address: exclusion@gmail.com
PostgreSQL version: 15.3
Operating system: Ubuntu 22.04
Description:
When the following query executed:
CREATE EXTENSION fuzzystrmatch;
SELECT difference('', '');
Valgrind detects the following issue:
==00:00:00:04.351 1561837== Conditional jump or move depends on
uninitialised value(s)
==00:00:00:04.351 1561837== at 0x4867265: difference
(fuzzystrmatch.c:787)
==00:00:00:04.351 1561837== by 0x3FFC24: ExecInterpExpr
(execExprInterp.c:751)
==00:00:00:04.351 1561837== by 0x3FC3D8: ExecInterpExprStillValid
(execExprInterp.c:1826)
==00:00:00:04.351 1561837== by 0x4EDE9C: ExecEvalExprSwitchContext
(executor.h:341)
==00:00:00:04.351 1561837== by 0x4EDE9C: evaluate_expr (clauses.c:4823)
==00:00:00:04.351 1561837== by 0x4EE078: evaluate_function
(clauses.c:4325)
==00:00:00:04.351 1561837== by 0x4F0530: simplify_function
(clauses.c:3908)
==00:00:00:04.351 1561837== by 0x4EE33C: eval_const_expressions_mutator
(clauses.c:2427)
==00:00:00:04.351 1561837== by 0x47F0B5: expression_tree_mutator
(nodeFuncs.c:3080)
==00:00:00:04.351 1561837== by 0x4EF776: eval_const_expressions_mutator
(clauses.c:3527)
==00:00:00:04.351 1561837== by 0x47F2FF: expression_tree_mutator
(nodeFuncs.c:3166)
==00:00:00:04.351 1561837== by 0x4EF776: eval_const_expressions_mutator
(clauses.c:3527)
==00:00:00:04.351 1561837== by 0x4EF8F1: eval_const_expressions
(clauses.c:2107)
==00:00:00:04.351 1561837==
In this case, _soundex() exits prematurely and sets only first and last
char
of it's parameter outstr, but difference() loops through SOUNDEX_LEN
chars,
and thus uses initialized data.
Commits
-
Ensure Soundex difference() function handles empty input sanely.
- eaf99e4c4ae4 15.4 landed
- ccd362325622 14.9 landed
- 8084bf9a493d 11.21 landed
- 1d369c9e90f3 16.0 landed
- 0966291a4ade 12.16 landed
- 0409c7fc746b 13.12 landed