Description
The CACHESIGN.sign field is a BITVECP, not a TRGM, so you should not use GETSIGN() on it. You don't get a compiler warning because the GETSIGN() macro includes a cast. It resulted in a bogus read beyond end of buffer, which would cause bad split decisions or a crash if you're very unlucky.
Vulnerability Information
- Product / Framework: PostgreSQL Core
- Vendor Domain: www.postgresql.org
- Vulnerability Type: memory corruption
- CVE Details: View Full CVE Details →