Replace fixed-size, too-short array with a palloc'd one. MatchNamedCall's arggiven array was declared FUNC_MAX_ARGS long, but we may actually use up to pronallargs elements, and that can be more than FUNC_MAX_ARGS if the function has OUT arguments (cf. ProcedureCreate). Convert it to a palloc'd array.
Reported-by: Zheng Yu <[email protected]> Reported-by: ylwangtju <[email protected]> Author: Tom Lane <[email protected]> Reviewed-by: Michael Paquier <[email protected]> Reviewed-by: Masahiko Sawada <[email protected]> Backpatch-through: 14 Security: CVE-2026-14679 Branch ------ REL_14_STABLE Details ------- https://git.postgresql.org/pg/commitdiff/cf44ff5e66353264451ac239b39e9053e8d138e6 Author: Tom Lane <[email protected]> Modified Files -------------- src/backend/catalog/namespace.c | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-)
