aboutsummaryrefslogtreecommitdiff
path: root/src/backend/utils/adt/jsonpath.c
diff options
context:
space:
mode:
authorAndres Freund <andres@anarazel.de>2019-06-18 15:51:04 -0700
committerAndres Freund <andres@anarazel.de>2019-06-18 15:51:04 -0700
commit23224563d97913aa824d04c498d59ad4d85fda38 (patch)
tree9bec0b63d91c70997d72e1167cedec1ec8d91e3b /src/backend/utils/adt/jsonpath.c
parent8b21b416ed621501db3be38817c298c57470524f (diff)
downloadpostgresql-23224563d97913aa824d04c498d59ad4d85fda38.tar.gz
postgresql-23224563d97913aa824d04c498d59ad4d85fda38.zip
Fix memory corruption/crash in ANALYZE.
This fixes an embarrassing oversight I (Andres) made in 737a292b, namely missing two place where liverows/deadrows were used when converting those variables to pointers, leading to incrementing the pointer, rather than the value. It's not that actually that easy to trigger a crash: One needs tuples deleted by the current transaction, followed by a tuple deleted in another session, all in one page. Which is presumably why this hasn't been noticed before. Reported-By: Steve Singer Author: Steve Singer Discussion: https://postgr.es/m/c7988239-d42c-ddc4-41db-171b23b35e4f@ssinger.info
Diffstat (limited to 'src/backend/utils/adt/jsonpath.c')
0 files changed, 0 insertions, 0 deletions