Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Erik Wienhold <ewie(at)ewie(dot)name>
Cc: fuboat(at)outlook(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments
Date: 2024-09-13 16:32:23
Message-ID: 104996.1726245143@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Erik Wienhold <ewie(at)ewie(dot)name> writes:
> On 2024-09-13 14:31 +0200, PG Bug reporting form wrote:
>> SELECT XPATH(REPEAT('(', 100000), '<root/>');

> This looks a lot like https://gitlab.gnome.org/GNOME/libxml2/-/issues/137

Interesting.

> What is your libxml2 version?

It crashes with all the libxml2 versions I have at hand, the newest
being 2.13.3 from MacPorts --- which seems to be the latest per
https://download.gnome.org/sources/libxml2/

I wonder what became of the alleged fix.

regards, tom lane

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2024-09-13 16:56:03 Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments
Previous Message Tom Lane 2024-09-13 16:18:58 Re: BUG #18617: PostgreSQL Server Subprocess Crashes by the XPATH Function Expression with Crafted Arguments