Skip to content

Add array bounds and loop checks in postgres input#48528

Merged
fearful-symmetry merged 3 commits intoelastic:mainfrom
fearful-symmetry:postgres-cleanup
Jan 26, 2026
Merged

Add array bounds and loop checks in postgres input#48528
fearful-symmetry merged 3 commits intoelastic:mainfrom
fearful-symmetry:postgres-cleanup

Conversation

@fearful-symmetry
Copy link
Contributor

Proposed commit message

Small PR that adds some array bounds checks to the postgres parser.

This also removes the usage of our custom nto* functions, as the golang functions will not panic if we're given an invalid array length.

Checklist

  • My code follows the style guidelines of this project
  • I have commented my code, particularly in hard-to-understand areas
  • I have made corresponding changes to the documentation
  • I have made corresponding change to the default configuration files
  • I have added tests that prove my fix is effective or that my feature works. Where relevant, I have used the stresstest.sh script to run them under stress conditions and race detector to verify their stability.
  • I have added an entry in ./changelog/fragments using the changelog tool.
@fearful-symmetry fearful-symmetry self-assigned this Jan 23, 2026
@fearful-symmetry fearful-symmetry added the Team:Security-Linux Platform Linux Platform Team in Security Solution label Jan 23, 2026
@fearful-symmetry fearful-symmetry requested a review from a team as a code owner January 23, 2026 21:14
@fearful-symmetry fearful-symmetry added the backport-active-all Automated backport with mergify to all the active branches label Jan 23, 2026
@elasticmachine
Copy link
Contributor

Pinging @elastic/sec-linux-platform (Team:Security-Linux Platform)

@botelastic botelastic bot added needs_team Indicates that the issue/PR needs a Team:* label and removed needs_team Indicates that the issue/PR needs a Team:* label labels Jan 23, 2026
@github-actions
Copy link
Contributor

🤖 GitHub comments

Just comment with:

  • run docs-build : Re-trigger the docs validation. (use unformatted text in the comment!)
@fearful-symmetry fearful-symmetry merged commit dec1b31 into elastic:main Jan 26, 2026
42 of 43 checks passed
@github-actions
Copy link
Contributor

@Mergifyio backport 8.19 9.2 9.3

@mergify
Copy link
Contributor

mergify bot commented Jan 26, 2026

backport 8.19 9.2 9.3

✅ Backports have been created

Details
mergify bot pushed a commit that referenced this pull request Jan 26, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)
mergify bot pushed a commit that referenced this pull request Jan 26, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)
mergify bot pushed a commit that referenced this pull request Jan 26, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)
pierrehilbert pushed a commit that referenced this pull request Jan 27, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)

Co-authored-by: Alex K. <8418476+fearful-symmetry@users.noreply.github.com>
pierrehilbert pushed a commit that referenced this pull request Jan 27, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)

Co-authored-by: Alex K. <8418476+fearful-symmetry@users.noreply.github.com>
fearful-symmetry added a commit that referenced this pull request Jan 28, 2026
* Do array bounds and loop checks

* add changelog

* fix bad array access

(cherry picked from commit dec1b31)

Co-authored-by: Alex K. <8418476+fearful-symmetry@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

backport-active-all Automated backport with mergify to all the active branches Team:Security-Linux Platform Linux Platform Team in Security Solution

3 participants