mirror of
https://github.com/postgres/postgres.git
synced 2025-06-25 01:02:05 +03:00
Be more careful about out-of-range dates and timestamps.
Tighten the semantics of boundary-case timestamptz so that we allow timestamps >= '4714-11-24 00:00+00 BC' and < 'ENDYEAR-01-01 00:00+00 AD' exactly, no more and no less, but it is allowed to enter timestamps within that range using non-GMT timezone offsets (which could make the nominal date 4714-11-23 BC or ENDYEAR-01-01 AD). This eliminates dump/reload failure conditions for timestamps near the endpoints. To do this, separate checking of the inputs for date2j() from the final range check, and allow the Julian date code to handle a range slightly wider than the nominal range of the datatypes. Also add a bunch of checks to detect out-of-range dates and timestamps that formerly could be returned by operations such as date-plus-integer. All C-level functions that return date, timestamp, or timestamptz should now be proof against returning a value that doesn't pass IS_VALID_DATE() or IS_VALID_TIMESTAMP(). Vitaly Burovoy, reviewed by Anastasia Lubennikova, and substantially whacked around by me
This commit is contained in:
@ -287,22 +287,32 @@ do { \
|
||||
*/
|
||||
#define isleap(y) (((y) % 4) == 0 && (((y) % 100) != 0 || ((y) % 400) == 0))
|
||||
|
||||
/* Julian date support for date2j() and j2date()
|
||||
*
|
||||
* IS_VALID_JULIAN checks the minimum date exactly, but is a bit sloppy
|
||||
* about the maximum, since it's far enough out to not be especially
|
||||
* interesting.
|
||||
/*
|
||||
* Julian date support --- see comments in backend's timestamp.h.
|
||||
*/
|
||||
|
||||
#define JULIAN_MINYEAR (-4713)
|
||||
#define JULIAN_MINMONTH (11)
|
||||
#define JULIAN_MINDAY (24)
|
||||
#define JULIAN_MAXYEAR (5874898)
|
||||
#define JULIAN_MAXMONTH (6)
|
||||
#define JULIAN_MAXDAY (3)
|
||||
|
||||
#define IS_VALID_JULIAN(y,m,d) ((((y) > JULIAN_MINYEAR) \
|
||||
|| (((y) == JULIAN_MINYEAR) && (((m) > JULIAN_MINMONTH) \
|
||||
|| (((m) == JULIAN_MINMONTH) && ((d) >= JULIAN_MINDAY))))) \
|
||||
&& ((y) < JULIAN_MAXYEAR))
|
||||
#define IS_VALID_JULIAN(y,m,d) \
|
||||
(((y) > JULIAN_MINYEAR || \
|
||||
((y) == JULIAN_MINYEAR && ((m) >= JULIAN_MINMONTH))) && \
|
||||
((y) < JULIAN_MAXYEAR || \
|
||||
((y) == JULIAN_MAXYEAR && ((m) < JULIAN_MAXMONTH))))
|
||||
|
||||
#ifdef HAVE_INT64_TIMESTAMP
|
||||
#define MIN_TIMESTAMP INT64CONST(-211813488000000000)
|
||||
#define END_TIMESTAMP INT64CONST(9223371331200000000)
|
||||
#else
|
||||
#define MIN_TIMESTAMP (-211813488000.0)
|
||||
#define END_TIMESTAMP 185330760393600.0
|
||||
#endif
|
||||
|
||||
#define IS_VALID_TIMESTAMP(t) (MIN_TIMESTAMP <= (t) && (t) < END_TIMESTAMP)
|
||||
|
||||
#define UTIME_MINYEAR (1901)
|
||||
#define UTIME_MINMONTH (12)
|
||||
|
@ -61,7 +61,7 @@ tm2timestamp(struct tm * tm, fsec_t fsec, int *tzp, timestamp * result)
|
||||
time;
|
||||
#endif
|
||||
|
||||
/* Julian day routines are not correct for negative Julian days */
|
||||
/* Prevent overflow in Julian-day routines */
|
||||
if (!IS_VALID_JULIAN(tm->tm_year, tm->tm_mon, tm->tm_mday))
|
||||
return -1;
|
||||
|
||||
@ -83,6 +83,10 @@ tm2timestamp(struct tm * tm, fsec_t fsec, int *tzp, timestamp * result)
|
||||
if (tzp != NULL)
|
||||
*result = dt2local(*result, -(*tzp));
|
||||
|
||||
/* final range check catches just-out-of-range timestamps */
|
||||
if (!IS_VALID_TIMESTAMP(*result))
|
||||
return -1;
|
||||
|
||||
return 0;
|
||||
} /* tm2timestamp() */
|
||||
|
||||
|
Reference in New Issue
Block a user