]> granicus.if.org Git - postgresql/commitdiff
Fix unsafe usage of strerror(errno) within ereport().
authorTom Lane <tgl@sss.pgh.pa.us>
Mon, 21 May 2018 04:32:28 +0000 (00:32 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Mon, 21 May 2018 04:32:44 +0000 (00:32 -0400)
This is the converse of the unsafe-usage-of-%m problem: the reason
ereport/elog provide that format code is mainly to dodge the hazard
of errno getting changed before control reaches functions within the
arguments of the macro.  I only found one instance of this hazard,
but it's been there since 9.4 :-(.

src/backend/libpq/auth.c

index be8c4776859601f076fb2c7f6ba263e3976ea8b0..9c77701785f32fff5d44a7d5394c9c3f01459b35 100644 (file)
@@ -1752,10 +1752,12 @@ auth_peer(hbaPort *port)
        pw = getpwuid(uid);
        if (!pw)
        {
+               int                     save_errno = errno;
+
                ereport(LOG,
                                (errmsg("could not look up local user ID %ld: %s",
                                                (long) uid,
-                                               errno ? strerror(errno) : _("user does not exist"))));
+                                               save_errno ? strerror(save_errno) : _("user does not exist"))));
                return STATUS_ERROR;
        }