Replace fixed-size, too-short array with a palloc'd one. MatchNamedCall's arggiven array was declared FUNC_MAX_ARGS long, but we may actually use up to pronallargs elements, and that can be more than FUNC_MAX_ARGS if the function has OUT arguments (cf. ProcedureCreate). Convert it to a palloc'd array.
Reported-by: Zheng Yu <[email protected]> Reported-by: ylwangtju <[email protected]> Author: Tom Lane <[email protected]> Reviewed-by: Michael Paquier <[email protected]> Reviewed-by: Masahiko Sawada <[email protected]> Backpatch-through: 14 Security: CVE-2026-14679 Branch ------ REL_18_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/7f0e1aac7a7b54b6b575a3b4d6c90088dd90c38b Author: Tom Lane <[email protected]> Modified Files -------------- src/backend/catalog/namespace.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
