Tighten pg_get_object_address argument checking
Peter Eisentraut <peter.eisentraut@enterprisedb.com>
From: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
To: pgsql-hackers <pgsql-hackers@postgresql.org>
Date: 2022-09-20T17:44:12Z
Lists: pgsql-hackers
Attachments
- 0001-Tighten-pg_get_object_address-argument-checking.patch (text/plain) patch 0001
For publication schemas (OBJECT_PUBLICATION_NAMESPACE) and user mappings (OBJECT_USER_MAPPING), pg_get_object_address() checked the array length of the second argument, but not of the first argument. If the first argument was too long, it would just silently ignore everything but the first argument. Fix that by checking the length of the first argument as well. I wouldn't be surprised if there were more holes like this in this area. I just happened to find these while working on something related.
Commits
-
Tighten pg_get_object_address argument checking
- 2da8c4cff393 16.0 landed
- ab7032b3a8fe 15.0 landed