From: | andres(at)2ndquadrant(dot)com |
---|---|
To: | pgsql-hackers(at)postgresql(dot)org |
Subject: | [PATCH] Fix harmless access to uninitialized memory in ri_triggers.c. |
Date: | 2014-05-08 16:33:55 |
Message-ID: | 1399566835-7495-1-git-send-email-andres@2ndquadrant.com |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-hackers |
From: Andres Freund <andres(at)anarazel(dot)de>
When cache invalidations arrive while ri_LoadConstraintInfo() is busy
filling a new cache entry, InvalidateConstraintCacheCallBack()
compares the - not yet initialized - oidHashValue field with the
to-be-invalidated hash value. To fix check whether the entry is
already marked as invalid.
---
src/backend/utils/adt/ri_triggers.c | 3 ++-
1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/backend/utils/adt/ri_triggers.c b/src/backend/utils/adt/ri_triggers.c
index d30847b..e4d7b2c 100644
--- a/src/backend/utils/adt/ri_triggers.c
+++ b/src/backend/utils/adt/ri_triggers.c
@@ -2934,7 +2934,8 @@ InvalidateConstraintCacheCallBack(Datum arg, int cacheid, uint32 hashvalue)
hash_seq_init(&status, ri_constraint_cache);
while ((hentry = (RI_ConstraintInfo *) hash_seq_search(&status)) != NULL)
{
- if (hashvalue == 0 || hentry->oidHashValue == hashvalue)
+ if (hentry->valid &&
+ (hashvalue == 0 || hentry->oidHashValue == hashvalue))
hentry->valid = false;
}
}
--
1.8.5.rc2.dirty
From | Date | Subject | |
---|---|---|---|
Next Message | Andres Freund | 2014-05-08 16:39:53 | Re: Recursive ReceiveSharedInvalidMessages not safe |
Previous Message | Andres Freund | 2014-05-08 16:29:00 | A couple logical decoding fixes/patches |