From 14075d0d5f068cf790180db8f5dc4588a74341a6 Mon Sep 17 00:00:00 2001 From: Oskar Eichler Date: Fri, 4 Sep 2026 00:34:20 +0700 Subject: [PATCH] Bound binary array preallocation by payload --- ext/pg_binary_decoder.c | 1 + 1 file changed, 1 insertion(+) diff --git a/ext/pg_binary_decoder.c b/ext/pg_binary_decoder.c index 18f07d08d..d2166aef4 100644 --- a/ext/pg_binary_decoder.c +++ b/ext/pg_binary_decoder.c @@ -219,6 +219,7 @@ pg_bin_dec_array(t_pg_coder *conv, const char *input_line, int len, int tuple, i cur_ptr += 8; } nitems = (int)nitems32; + if (nitems > (line_end_ptr - cur_ptr) / 4) goto length_error; dim = 0; arrays[dim] = rb_ary_new2(ndim == 0 ? 0 : dim_sizes[dim]);