Location via proxy:   [ UP ]  
[Report a bug]   [Manage cookies]                
Skip to content

Commit 014763e

Browse files
committed
Fix use of dangling pointer in heap_delete() when logging replica identity
When logging the replica identity of a deleted tuple, XLOG_HEAP_DELETE records include references of the old tuple. Its data is stored in an intermediate variable used to register this information for the WAL record, but this variable gets away from the stack when the record gets actually inserted. Spotted by clang's AddressSanitizer. Author: Stas Kelvish Discussion: https://postgr.es/m/085C8825-AD86-4E93-AF80-E26CDF03D1EA@postgrespro.ru Backpatch-through: 9.4
1 parent 650296f commit 014763e

File tree

1 file changed

+1
-2
lines changed

1 file changed

+1
-2
lines changed

src/backend/access/heap/heapam.c

Lines changed: 1 addition & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -3265,6 +3265,7 @@ heap_delete(Relation relation, ItemPointer tid,
32653265
if (RelationNeedsWAL(relation))
32663266
{
32673267
xl_heap_delete xlrec;
3268+
xl_heap_header xlhdr;
32683269
XLogRecPtr recptr;
32693270

32703271
/* For logical decode we need combocids to properly decode the catalog */
@@ -3295,8 +3296,6 @@ heap_delete(Relation relation, ItemPointer tid,
32953296
*/
32963297
if (old_key_tuple != NULL)
32973298
{
3298-
xl_heap_header xlhdr;
3299-
33003299
xlhdr.t_infomask2 = old_key_tuple->t_data->t_infomask2;
33013300
xlhdr.t_infomask = old_key_tuple->t_data->t_infomask;
33023301
xlhdr.t_hoff = old_key_tuple->t_data->t_hoff;

0 commit comments

Comments
 (0)