Clean up assorted failures under clang's -fsanitize=undefined checks.

Most of these are cases where we could call memcpy() or other libc
functions with a NULL pointer and a zero count, which is forbidden
by POSIX even though every production version of libc allows it.
We've fixed such things before in a piecemeal way, but apparently
never made an effort to try to get them all.  I don't claim that
this patch does so either, but it gets every failure I observe in
check-world, using clang 12.0.1 on current RHEL8.

numeric.c has a different issue that the sanitizer doesn't like:
"ln(-1.0)" will compute log10(0) and then try to assign the
resulting -Inf to an integer variable.  We don't actually use the
result in such a case, so there's no live bug.

Back-patch to all supported branches, with the idea that we might
start running a buildfarm member that tests this case.  This includes
back-patching c1132aae3 (Check the size in COPY_POINTER_FIELD),
which previously silenced some of these issues in copyfuncs.c.

Discussion: https://postgr.es/m/CALNJ-vT9r0DSsAOw9OXVJFxLENoVS_68kJ5x0p44atoYH+H4dg@mail.gmail.com

diff --git a/contrib/pgcrypto/px.c b/contrib/pgcrypto/px.c
index 0b2d890b7264f855c090004d8d93be7e719b34d2..a7c25c3804ff883039a2f0062b296dc4b67aef65 100644 (file)
--- a/contrib/pgcrypto/px.c
+++ b/contrib/pgcrypto/px.c
@@ -208,7 +208,7 @@ combo_init(PX_Combo *cx, const uint8 *key, unsigned klen,
        memset(ivbuf, 0, ivs);
        if (ivlen > ivs)
            memcpy(ivbuf, iv, ivs);
-       else
+       else if (ivlen > 0)
            memcpy(ivbuf, iv, ivlen);
    }
 

diff --git a/src/backend/access/heap/heapam.c b/src/backend/access/heap/heapam.c
index fcb14f2ac5bacfde9fa3d2620edf015a65c0d071..a66e6e6b51d82bbe6c153baa2fe666a75bf55c5f 100644 (file)
--- a/src/backend/access/heap/heapam.c
+++ b/src/backend/access/heap/heapam.c
@@ -305,7 +305,7 @@ initscan(HeapScanDesc scan, ScanKey key, bool keep_startblock)
    /*
     * copy the scan key, if appropriate
     */
-   if (key != NULL)
+   if (key != NULL && scan->rs_nkeys > 0)
        memcpy(scan->rs_key, key, scan->rs_nkeys * sizeof(ScanKeyData));
 
    /*

diff --git a/src/backend/access/transam/xact.c b/src/backend/access/transam/xact.c
index b5ed77dc28b5f55b12d705ee22f3c1de739b86ab..25a3a4f97e638c9702acb37ab10df37799666cca 100644 (file)
--- a/src/backend/access/transam/xact.c
+++ b/src/backend/access/transam/xact.c
@@ -4991,8 +4991,9 @@ SerializeTransactionState(Size maxsize, char *start_address)
    {
        if (TransactionIdIsValid(s->transactionId))
            workspace[i++] = s->transactionId;
-       memcpy(&workspace[i], s->childXids,
-              s->nChildXids * sizeof(TransactionId));
+       if (s->nChildXids > 0)
+           memcpy(&workspace[i], s->childXids,
+                  s->nChildXids * sizeof(TransactionId));
        i += s->nChildXids;
    }
    Assert(i == nxids);

diff --git a/src/backend/nodes/copyfuncs.c b/src/backend/nodes/copyfuncs.c
index 1ed8e7d50a4591aaf2ce715386eba5ea9d84e60c..e49df56c1e36ed323ca2cd802e8caf0df0224233 100644 (file)
--- a/src/backend/nodes/copyfuncs.c
+++ b/src/backend/nodes/copyfuncs.c
@@ -57,8 +57,11 @@
 #define COPY_POINTER_FIELD(fldname, sz) \
    do { \
        Size    _size = (sz); \
-       newnode->fldname = palloc(_size); \
-       memcpy(newnode->fldname, from->fldname, _size); \
+       if (_size > 0) \
+       { \
+           newnode->fldname = palloc(_size); \
+           memcpy(newnode->fldname, from->fldname, _size); \
+       } \
    } while (0)
 
 /* Copy a parse location field (for Copy, this is same as scalar case) */
@@ -291,11 +294,8 @@ _copyRecursiveUnion(const RecursiveUnion *from)
     */
    COPY_SCALAR_FIELD(wtParam);
    COPY_SCALAR_FIELD(numCols);
-   if (from->numCols > 0)
-   {
-       COPY_POINTER_FIELD(dupColIdx, from->numCols * sizeof(AttrNumber));
-       COPY_POINTER_FIELD(dupOperators, from->numCols * sizeof(Oid));
-   }
+   COPY_POINTER_FIELD(dupColIdx, from->numCols * sizeof(AttrNumber));
+   COPY_POINTER_FIELD(dupOperators, from->numCols * sizeof(Oid));
    COPY_SCALAR_FIELD(numGroups);
 
    return newnode;
@@ -867,13 +867,10 @@ _copyMergeJoin(const MergeJoin *from)
    COPY_SCALAR_FIELD(skip_mark_restore);
    COPY_NODE_FIELD(mergeclauses);
    numCols = list_length(from->mergeclauses);
-   if (numCols > 0)
-   {
-       COPY_POINTER_FIELD(mergeFamilies, numCols * sizeof(Oid));
-       COPY_POINTER_FIELD(mergeCollations, numCols * sizeof(Oid));
-       COPY_POINTER_FIELD(mergeStrategies, numCols * sizeof(int));
-       COPY_POINTER_FIELD(mergeNullsFirst, numCols * sizeof(bool));
-   }
+   COPY_POINTER_FIELD(mergeFamilies, numCols * sizeof(Oid));
+   COPY_POINTER_FIELD(mergeCollations, numCols * sizeof(Oid));
+   COPY_POINTER_FIELD(mergeStrategies, numCols * sizeof(int));
+   COPY_POINTER_FIELD(mergeNullsFirst, numCols * sizeof(bool));
 
    return newnode;
 }
@@ -970,11 +967,8 @@ _copyAgg(const Agg *from)
    COPY_SCALAR_FIELD(aggstrategy);
    COPY_SCALAR_FIELD(aggsplit);
    COPY_SCALAR_FIELD(numCols);
-   if (from->numCols > 0)
-   {
-       COPY_POINTER_FIELD(grpColIdx, from->numCols * sizeof(AttrNumber));
-       COPY_POINTER_FIELD(grpOperators, from->numCols * sizeof(Oid));
-   }
+   COPY_POINTER_FIELD(grpColIdx, from->numCols * sizeof(AttrNumber));
+   COPY_POINTER_FIELD(grpOperators, from->numCols * sizeof(Oid));
    COPY_SCALAR_FIELD(numGroups);
    COPY_BITMAPSET_FIELD(aggParams);
    COPY_NODE_FIELD(groupingSets);
@@ -995,17 +989,11 @@ _copyWindowAgg(const WindowAgg *from)
 
    COPY_SCALAR_FIELD(winref);
    COPY_SCALAR_FIELD(partNumCols);
-   if (from->partNumCols > 0)
-   {
-       COPY_POINTER_FIELD(partColIdx, from->partNumCols * sizeof(AttrNumber));
-       COPY_POINTER_FIELD(partOperators, from->partNumCols * sizeof(Oid));
-   }
+   COPY_POINTER_FIELD(partColIdx, from->partNumCols * sizeof(AttrNumber));
+   COPY_POINTER_FIELD(partOperators, from->partNumCols * sizeof(Oid));
    COPY_SCALAR_FIELD(ordNumCols);
-   if (from->ordNumCols > 0)
-   {
-       COPY_POINTER_FIELD(ordColIdx, from->ordNumCols * sizeof(AttrNumber));
-       COPY_POINTER_FIELD(ordOperators, from->ordNumCols * sizeof(Oid));
-   }
+   COPY_POINTER_FIELD(ordColIdx, from->ordNumCols * sizeof(AttrNumber));
+   COPY_POINTER_FIELD(ordOperators, from->ordNumCols * sizeof(Oid));
    COPY_SCALAR_FIELD(frameOptions);
    COPY_NODE_FIELD(startOffset);
    COPY_NODE_FIELD(endOffset);

diff --git a/src/backend/storage/ipc/shm_mq.c b/src/backend/storage/ipc/shm_mq.c
index 5195e9e0ef500a275243bf749a73bae26709982c..405f7a1ef04a54f22ba4fdc2576e1a16edecc88f 100644 (file)
--- a/src/backend/storage/ipc/shm_mq.c
+++ b/src/backend/storage/ipc/shm_mq.c
@@ -730,8 +730,11 @@ shm_mq_receive(shm_mq_handle *mqh, Size *nbytesp, void **datap, bool nowait)
 
        /* Copy as much as we can. */
        Assert(mqh->mqh_partial_bytes + rb <= nbytes);
-       memcpy(&mqh->mqh_buffer[mqh->mqh_partial_bytes], rawdata, rb);
-       mqh->mqh_partial_bytes += rb;
+       if (rb > 0)
+       {
+           memcpy(&mqh->mqh_buffer[mqh->mqh_partial_bytes], rawdata, rb);
+           mqh->mqh_partial_bytes += rb;
+       }
 
        /*
         * Update count of bytes read, with alignment padding.  Note that this

diff --git a/src/backend/utils/adt/numeric.c b/src/backend/utils/adt/numeric.c
index 8b97e0c170520c31baee2468a23edc0a1fbb5a14..edb54a6f2b5b8f49b542cee31e95de7de3d2d957 100644 (file)
--- a/src/backend/utils/adt/numeric.c
+++ b/src/backend/utils/adt/numeric.c
@@ -7788,12 +7788,20 @@ exp_var(NumericVar *arg, NumericVar *result, int rscale)
  *
  * Essentially, we're approximating log10(abs(ln(var))).  This is used to
  * determine the appropriate rscale when computing natural logarithms.
+ *
+ * Note: many callers call this before range-checking the input.  Therefore,
+ * we must be robust against values that are invalid to apply ln() to.
+ * We don't wish to throw an error here, so just return zero in such cases.
  */
 static int
 estimate_ln_dweight(NumericVar *var)
 {
    int         ln_dweight;
 
+   /* Caller should fail on ln(negative), but for the moment return zero */
+   if (var->sign != NUMERIC_POS)
+       return 0;
+
    if (cmp_var(var, &const_zero_point_nine) >= 0 &&
        cmp_var(var, &const_one_point_one) <= 0)
    {

diff --git a/src/backend/utils/time/snapmgr.c b/src/backend/utils/time/snapmgr.c
index cbefc4ba03b97ac9a9dc808362d20600a06a672c..288a09b183fb510b877e963e2fabe272257af7d4 100644 (file)
--- a/src/backend/utils/time/snapmgr.c
+++ b/src/backend/utils/time/snapmgr.c
@@ -592,12 +592,14 @@ SetTransactionSnapshot(Snapshot sourcesnap, VirtualTransactionId *sourcevxid,
    CurrentSnapshot->xmax = sourcesnap->xmax;
    CurrentSnapshot->xcnt = sourcesnap->xcnt;
    Assert(sourcesnap->xcnt <= GetMaxSnapshotXidCount());
-   memcpy(CurrentSnapshot->xip, sourcesnap->xip,
-          sourcesnap->xcnt * sizeof(TransactionId));
+   if (sourcesnap->xcnt > 0)
+       memcpy(CurrentSnapshot->xip, sourcesnap->xip,
+              sourcesnap->xcnt * sizeof(TransactionId));
    CurrentSnapshot->subxcnt = sourcesnap->subxcnt;
    Assert(sourcesnap->subxcnt <= GetMaxSnapshotSubxidCount());
-   memcpy(CurrentSnapshot->subxip, sourcesnap->subxip,
-          sourcesnap->subxcnt * sizeof(TransactionId));
+   if (sourcesnap->subxcnt > 0)
+       memcpy(CurrentSnapshot->subxip, sourcesnap->subxip,
+              sourcesnap->subxcnt * sizeof(TransactionId));
    CurrentSnapshot->suboverflowed = sourcesnap->suboverflowed;
    CurrentSnapshot->takenDuringRecovery = sourcesnap->takenDuringRecovery;
    /* NB: curcid should NOT be copied, it's a local matter */

diff --git a/src/backend/utils/time/tqual.c b/src/backend/utils/time/tqual.c
index b981cd5b84f7910328e603a58f39c5b2559a3734..57c455ecf3c32f659cb763f98eb84c1a087243cf 100644 (file)
--- a/src/backend/utils/time/tqual.c
+++ b/src/backend/utils/time/tqual.c
@@ -1619,8 +1619,8 @@ HeapTupleHeaderIsOnlyLocked(HeapTupleHeader tuple)
 static bool
 TransactionIdInArray(TransactionId xid, TransactionId *xip, Size num)
 {
-   return bsearch(&xid, xip, num,
-                  sizeof(TransactionId), xidComparator) != NULL;
+   return num > 0 &&
+       bsearch(&xid, xip, num, sizeof(TransactionId), xidComparator) != NULL;
 }
 
 /*

diff --git a/src/fe_utils/print.c b/src/fe_utils/print.c
index eb6a333178389a2aa8e5089ad72188494c9bdff0..e7f31f247d1b06a3ba0837d80c9faea16fb35904 100644 (file)
--- a/src/fe_utils/print.c
+++ b/src/fe_utils/print.c
@@ -913,7 +913,8 @@ print_aligned_text(const printTableContent *cont, FILE *fout, bool is_pager)
 
            more_col_wrapping = col_count;
            curr_nl_line = 0;
-           memset(header_done, false, col_count * sizeof(bool));
+           if (col_count > 0)
+               memset(header_done, false, col_count * sizeof(bool));
            while (more_col_wrapping)
            {
                if (opt_border == 2)