Prevent stack overflow in query-type functions.

nmisch · nmisch · commit 682a25d41c8a · 2015-10-05T10:06:36.000-04:00
The tsquery, ltxtquery and query_int data types have a common ancestor.
Having acquired check_stack_depth() calls independently, each was
missing at least one call.  Back-patch to 9.0 (all supported versions).
diff --git a/contrib/intarray/_int_bool.c b/contrib/intarray/_int_bool.c
@@ -541,6 +541,9 @@ typedef struct
 static void
 infix(INFIX *in, bool first)
 {
+	/* since this function recurses, it could be driven to stack overflow. */
+	check_stack_depth();
+
 	if (in->curpol->type == VAL)
 	{
 		RESIZEBUF(in, 11);
diff --git a/contrib/ltree/ltxtquery_io.c b/contrib/ltree/ltxtquery_io.c
@@ -420,6 +420,9 @@ while( ( (inf)->cur - (inf)->buf ) + (addsize) + 1 >= (inf)->buflen ) \
 static void
 infix(INFIX *in, bool first)
 {
+	/* since this function recurses, it could be driven to stack overflow. */
+	check_stack_depth();
+
 	if (in->curpol->type == VAL)
 	{
 		char	   *op = in->op + in->curpol->distance;
diff --git a/contrib/ltree/ltxtquery_op.c b/contrib/ltree/ltxtquery_op.c
@@ -8,6 +8,7 @@
 #include <ctype.h>
 
 #include "ltree.h"
+#include "miscadmin.h"
 
 PG_FUNCTION_INFO_V1(ltxtq_exec);
 PG_FUNCTION_INFO_V1(ltxtq_rexec);
@@ -18,6 +19,9 @@ PG_FUNCTION_INFO_V1(ltxtq_rexec);
 bool
 ltree_execute(ITEM *curitem, void *checkval, bool calcnot, bool (*chkcond) (void *checkval, ITEM *val))
 {
+	/* since this function recurses, it could be driven to stack overflow */
+	check_stack_depth();
+
 	if (curitem->type == VAL)
 		return (*chkcond) (checkval, curitem);
 	else if (curitem->val == (int4) '!')
diff --git a/src/backend/utils/adt/tsquery_cleanup.c b/src/backend/utils/adt/tsquery_cleanup.c
@@ -34,6 +34,9 @@ maketree(QueryItem *in)
 {
 	NODE	   *node = (NODE *) palloc(sizeof(NODE));
 
+	/* since this function recurses, it could be driven to stack overflow. */
+	check_stack_depth();
+
 	node->valnode = in;
 	node->right = node->left = NULL;
 	if (in->type == QI_OPR)

Original file line number	Diff line number	Diff line change
`@@ -541,6 +541,9 @@ typedef struct`
`541`	`541`	`static void`
`542`	`542`	`infix(INFIX *in, bool first)`
`543`	`543`	`{`
	`544`	`+ /* since this function recurses, it could be driven to stack overflow. */`
	`545`	`+ check_stack_depth();`
	`546`	`+`
`544`	`547`	`if (in->curpol->type == VAL)`
`545`	`548`	`{`
`546`	`549`	`RESIZEBUF(in, 11);`
Original file line number	Diff line number	Diff line change
`@@ -420,6 +420,9 @@ while( ( (inf)->cur - (inf)->buf ) + (addsize) + 1 >= (inf)->buflen ) \`
`420`	`420`	`static void`
`421`	`421`	`infix(INFIX *in, bool first)`
`422`	`422`	`{`
	`423`	`+ /* since this function recurses, it could be driven to stack overflow. */`
	`424`	`+ check_stack_depth();`
	`425`	`+`
`423`	`426`	`if (in->curpol->type == VAL)`
`424`	`427`	`{`
`425`	`428`	`char *op = in->op + in->curpol->distance;`
Original file line number	Diff line number	Diff line change
`@@ -34,6 +34,9 @@ maketree(QueryItem *in)`
`34`	`34`	`{`
`35`	`35`	`NODE node = (NODE ) palloc(sizeof(NODE));`
`36`	`36`
	`37`	`+ /* since this function recurses, it could be driven to stack overflow. */`
	`38`	`+ check_stack_depth();`
	`39`	`+`
`37`	`40`	`node->valnode = in;`
`38`	`41`	`node->right = node->left = NULL;`
`39`	`42`	`if (in->type == QI_OPR)`