1
0
mirror of https://github.com/postgres/postgres.git synced 2025-06-08 22:02:03 +03:00

Reduce an unnecessary O(N^3) loop in lexer.

The lexer's handling of operators contained an O(N^3) hazard when
dealing with long strings of + or - characters; it seems hard to
prevent this case from being O(N^2), but the additional N multiplier
was not needed.

Backpatch all the way since this has been there since 7.x, and it
presents at least a mild hazard in that trying to do Bind, PREPARE or
EXPLAIN on a hostile query could take excessive time (without
honouring cancels or timeouts) even if the query was never executed.
This commit is contained in:
Andrew Gierth 2018-08-23 19:59:38 +01:00
parent 788ae09f4a
commit 6c5ed68363
3 changed files with 63 additions and 24 deletions

View File

@ -844,7 +844,7 @@ other .
* to forbid operator names like '?-' that could not be * to forbid operator names like '?-' that could not be
* sequences of SQL operators. * sequences of SQL operators.
*/ */
while (nchars > 1 && if (nchars > 1 &&
(yytext[nchars - 1] == '+' || (yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-')) yytext[nchars - 1] == '-'))
{ {
@ -852,12 +852,25 @@ other .
for (ic = nchars - 2; ic >= 0; ic--) for (ic = nchars - 2; ic >= 0; ic--)
{ {
if (strchr("~!@#^&|`?%", yytext[ic])) char c = yytext[ic];
if (c == '~' || c == '!' || c == '@' ||
c == '#' || c == '^' || c == '&' ||
c == '|' || c == '`' || c == '?' ||
c == '%')
break; break;
} }
if (ic >= 0) if (ic < 0)
break; /* found a char that makes it OK */ {
nchars--; /* else remove the +/-, and check again */ /*
* didn't find a qualifying character, so remove
* all trailing [+-]
*/
do {
nchars--;
} while (nchars > 1 &&
(yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-'));
}
} }
SET_YYLLOC(); SET_YYLLOC();

View File

@ -811,7 +811,7 @@ other .
* to forbid operator names like '?-' that could not be * to forbid operator names like '?-' that could not be
* sequences of SQL operators. * sequences of SQL operators.
*/ */
while (nchars > 1 && if (nchars > 1 &&
(yytext[nchars - 1] == '+' || (yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-')) yytext[nchars - 1] == '-'))
{ {
@ -819,12 +819,25 @@ other .
for (ic = nchars - 2; ic >= 0; ic--) for (ic = nchars - 2; ic >= 0; ic--)
{ {
if (strchr("~!@#^&|`?%", yytext[ic])) char c = yytext[ic];
if (c == '~' || c == '!' || c == '@' ||
c == '#' || c == '^' || c == '&' ||
c == '|' || c == '`' || c == '?' ||
c == '%')
break; break;
} }
if (ic >= 0) if (ic < 0)
break; /* found a char that makes it OK */ {
nchars--; /* else remove the +/-, and check again */ /*
* didn't find a qualifying character, so remove
* all trailing [+-]
*/
do {
nchars--;
} while (nchars > 1 &&
(yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-'));
}
} }
if (nchars < yyleng) if (nchars < yyleng)

View File

@ -675,7 +675,7 @@ cppline {space}*#([^i][A-Za-z]*|{if}|{ifdef}|{ifndef}|{import})(.*\\{space})*.
* to forbid operator names like '?-' that could not be * to forbid operator names like '?-' that could not be
* sequences of SQL operators. * sequences of SQL operators.
*/ */
while (nchars > 1 && if (nchars > 1 &&
(yytext[nchars - 1] == '+' || (yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-')) yytext[nchars - 1] == '-'))
{ {
@ -683,12 +683,25 @@ cppline {space}*#([^i][A-Za-z]*|{if}|{ifdef}|{ifndef}|{import})(.*\\{space})*.
for (ic = nchars - 2; ic >= 0; ic--) for (ic = nchars - 2; ic >= 0; ic--)
{ {
if (strchr("~!@#^&|`?%", yytext[ic])) char c = yytext[ic];
if (c == '~' || c == '!' || c == '@' ||
c == '#' || c == '^' || c == '&' ||
c == '|' || c == '`' || c == '?' ||
c == '%')
break; break;
} }
if (ic >= 0) if (ic < 0)
break; /* found a char that makes it OK */ {
nchars--; /* else remove the +/-, and check again */ /*
* didn't find a qualifying character, so remove
* all trailing [+-]
*/
do {
nchars--;
} while (nchars > 1 &&
(yytext[nchars - 1] == '+' ||
yytext[nchars - 1] == '-'));
}
} }
if (nchars < yyleng) if (nchars < yyleng)