Horton

Thread

Commits

  1. Ensure ParseTzFile() closes the input file after failing.

  1. ParseTzFile doesn't FreeFile on error

    Kyotaro Horiguchi <horikyota.ntt@gmail.com> — 2022-05-30T08:37:40Z

    While working on some patch, I saw the following error message when a
transaction ended successfully after a failed call to
parse_and_validate_value().

The cause is ParseTzFile() returns leaving an open file descriptor
unfreed in some error cases.

This happens only in a special case when the errors are ignored, but
in principle the file descriptor should be released before exiting the
function.

I'm not sure it's worth fixing but the attached fixes that.

regards.

-- 
Kyotaro Horiguchi
NTT Open Source Software Center

  2. Re: ParseTzFile doesn't FreeFile on error

    Tom Lane <tgl@sss.pgh.pa.us> — 2022-05-30T17:11:04Z

    Kyotaro Horiguchi <horikyota.ntt@gmail.com> writes:
> The cause is ParseTzFile() returns leaving an open file descriptor
> unfreed in some error cases.
> This happens only in a special case when the errors are ignored, but
> in principle the file descriptor should be released before exiting the
> function.
> I'm not sure it's worth fixing but the attached fixes that.

I agree this is worth fixing, but adding all these gotos seems a bit
inelegant.  What do you think of the attached version?

BTW, my first thought about it was "what if one of the callees throws
elog(ERROR), eg palloc out-of-memory"?  But I think that's all right
since then we'll reach transaction abort cleanup, which won't whine
about open files.  The problem is limited to the case where no error
gets thrown.

			regards, tom lane

  3. Re: ParseTzFile doesn't FreeFile on error

    Kyotaro Horiguchi <horikyota.ntt@gmail.com> — 2022-05-31T00:22:37Z

    At Mon, 30 May 2022 13:11:04 -0400, Tom Lane <tgl@sss.pgh.pa.us> wrote in 
> Kyotaro Horiguchi <horikyota.ntt@gmail.com> writes:
> > The cause is ParseTzFile() returns leaving an open file descriptor
> > unfreed in some error cases.
> > This happens only in a special case when the errors are ignored, but
> > in principle the file descriptor should be released before exiting the
> > function.
> > I'm not sure it's worth fixing but the attached fixes that.
> 
> I agree this is worth fixing, but adding all these gotos seems a bit
> inelegant.  What do you think of the attached version?

It is what came up to me first. It is natural. So I'm fine with
it. The point of the "goto"s was that repeated "n = -1;break;" looked
somewhat noisy to me in the loop.

> BTW, my first thought about it was "what if one of the callees throws
> elog(ERROR), eg palloc out-of-memory"?  But I think that's all right
> since then we'll reach transaction abort cleanup, which won't whine
> about open files.  The problem is limited to the case where no error
> gets thrown.

Right. This "issue" is not a problem unless the caller continues
without throwing an exception after the function errors out, which is
not done by the current code.

regards.

-- 
Kyotaro Horiguchi
NTT Open Source Software Center

  4. Re: ParseTzFile doesn't FreeFile on error

    Tom Lane <tgl@sss.pgh.pa.us> — 2022-05-31T18:21:28Z

    Kyotaro Horiguchi <horikyota.ntt@gmail.com> writes:
> At Mon, 30 May 2022 13:11:04 -0400, Tom Lane <tgl@sss.pgh.pa.us> wrote in 
>> BTW, my first thought about it was "what if one of the callees throws
>> elog(ERROR), eg palloc out-of-memory"?  But I think that's all right
>> since then we'll reach transaction abort cleanup, which won't whine
>> about open files.  The problem is limited to the case where no error
>> gets thrown.

> Right. This "issue" is not a problem unless the caller continues
> without throwing an exception after the function errors out, which is
> not done by the current code.

Actually the problem *is* reachable, if you intentionally break the
already-active timezone abbreviation file: newly started sessions
produce file-leak warnings after failing to apply the setting.
I concede that's not a likely scenario, but that's why I think it's
worth fixing.

			regards, tom lane

  5. Re: ParseTzFile doesn't FreeFile on error

    Kyotaro Horiguchi <horikyota.ntt@gmail.com> — 2022-06-01T02:58:08Z

    At Tue, 31 May 2022 14:21:28 -0400, Tom Lane <tgl@sss.pgh.pa.us> wrote in 
> Actually the problem *is* reachable, if you intentionally break the
> already-active timezone abbreviation file: newly started sessions
> produce file-leak warnings after failing to apply the setting.
> I concede that's not a likely scenario, but that's why I think it's
> worth fixing.

Ah, I see. Thanks!

regards.

-- 
Kyotaro Horiguchi
NTT Open Source Software Center