fcfd245607
The header of an incremental file was only partially validated: num_blocks and truncation_block_length were checked against RELSEG_SIZE, but the block numbers stored after them were not checked at all. A block number of 0xFFFFFFFF made find_reconstructed_block_length() compute a reconstructed length of zero, since it adds 1 to the block number in 32-bit arithmetic, and reconstruct_from_incremental_file() then allocated zero-length sourcemap and offsetmap arrays but still indexed them with the block numbers taken from the file. In an assertions-enabled build, this would be caught by an Assert, but otherwise it would index the arrays out of bounds, typically crashing the process. To fix, check the block numbers when the header is read, like the other header fields. Reported-by: Sajeeb Lohani working with TrendAI Zero Day Initiative
PostgreSQL Database Management System
This directory contains the source code distribution of the PostgreSQL database management system.
PostgreSQL is an advanced object-relational database management system that supports an extended subset of the SQL standard, including transactions, foreign keys, subqueries, triggers, user-defined types and functions. This distribution also contains C language bindings.
Copyright and license information can be found in the file COPYRIGHT.
General documentation about this version of PostgreSQL can be found at https://www.postgresql.org/docs/devel/. In particular, information about building PostgreSQL from the source code can be found at https://www.postgresql.org/docs/devel/installation.html.
The latest version of this software, and related software, may be obtained at https://www.postgresql.org/download/. For more information look at our web site located at https://www.postgresql.org/.