Re: [PATCH] Fix two client-side NULL dereferences on malformed result sets (libpq, pg_receivewal)

[Fujii Masao]

On Tue, Nov 10, 2026 at 5:57 PM Chao Li <li.evan.c...@gmail.com> wrote:
> So 0002 also looks good to me.

Both patches look good to me too.
We should backpatch them to all supported versions?

BTW, there seem similar missing column-count checks in BaseBackup()
in pg_basebackup.c:

- The backup start and end position results are checked for one row,
  but not for at least one column, before passing column 0 to strlcpy().
- The tablespace header is checked for rows, but not for at least
  three columns, before passing column 2 to atoll().

Malformed responses could therefore cause NULL dereferences here too.
We should fix these separately?

Regards,

-- 
Fujii Masao