mirror of
https://github.com/postgres/postgres.git
synced 2026-07-11 10:35:32 -04:00
4015abe14b
In get_perl_array_ref(), for a PostgreSQL::InServer::ARRAY object, we look up its "array" key with hv_fetch_string() and then inspect the returned SV. However, hv_fetch_string() returns a NULL pointer when the key is absent, and the code dereferenced that result without first checking whether the pointer itself was NULL. As a result, a plperl function returning a forged PostgreSQL::InServer::ARRAY object that lacks the "array" key would crash the backend with a segmentation fault. Fix this by checking the pointer returned by hv_fetch_string() before dereferencing it, matching how other callers in this file already guard the result. With the check in place, such an object falls through to the existing error report instead of crashing. Author: Xing Guo <higuoxing@gmail.com> Reviewed-by: Richard Guo <guofenglinux@gmail.com> Discussion: https://postgr.es/m/CACpMh+DYgcnqZwQLXXuxQcehJTd7T8UmKWSLsK4mFBEp9G2ajA@mail.gmail.com Backpatch-through: 14 |
||
|---|---|---|
| .. | ||
| plperl.out | ||
| plperl_array.out | ||
| plperl_call.out | ||
| plperl_elog.out | ||
| plperl_elog_1.out | ||
| plperl_env.out | ||
| plperl_init.out | ||
| plperl_lc.out | ||
| plperl_lc_1.out | ||
| plperl_plperlu.out | ||
| plperl_setup.out | ||
| plperl_shared.out | ||
| plperl_transaction.out | ||
| plperl_trigger.out | ||
| plperl_unicode.out | ||
| plperl_unicode_1.out | ||
| plperl_util.out | ||
| plperlu.out | ||