]> granicus.if.org Git - postgresql/commitdiff
Fix unsafe usage of strerror(errno) within ereport().
authorTom Lane <tgl@sss.pgh.pa.us>
Mon, 21 May 2018 04:32:28 +0000 (00:32 -0400)
committerTom Lane <tgl@sss.pgh.pa.us>
Mon, 21 May 2018 04:32:28 +0000 (00:32 -0400)
This is the converse of the unsafe-usage-of-%m problem: the reason
ereport/elog provide that format code is mainly to dodge the hazard
of errno getting changed before control reaches functions within the
arguments of the macro.  I only found one instance of this hazard,
but it's been there since 9.4 :-(.

src/backend/libpq/auth.c

index 3014b17a7c189ee98ccedd737867ac383b0a5d3a..63f37902e64a112f08362e8fbe7de2070a73fce2 100644 (file)
@@ -2041,10 +2041,12 @@ auth_peer(hbaPort *port)
        pw = getpwuid(uid);
        if (!pw)
        {
+               int                     save_errno = errno;
+
                ereport(LOG,
                                (errmsg("could not look up local user ID %ld: %s",
                                                (long) uid,
-                                               errno ? strerror(errno) : _("user does not exist"))));
+                                               save_errno ? strerror(save_errno) : _("user does not exist"))));
                return STATUS_ERROR;
        }