diff options
| author | Amit Langote <amitlan@postgresql.org> | 2024-06-19 15:22:06 +0900 |
|---|---|---|
| committer | Amit Langote <amitlan@postgresql.org> | 2024-06-19 15:22:06 +0900 |
| commit | 0f271e8e8d9c8db0ea86c0d12b3221009b81d8bf (patch) | |
| tree | 4890052933a315ad69089aff7c38fbc532367196 /src/backend/executor/execExpr.c | |
| parent | 5e05a0e9924e97c24be13c75e4ba12c60bd0e4ad (diff) | |
SQL/JSON: Correct jsonpath variable name matching
Previously, GetJsonPathVar() allowed a jsonpath expression to
reference any prefix of a PASSING variable's name. For example, the
following query would incorrectly work:
SELECT JSON_QUERY(context_item, jsonpath '$xy' PASSING val AS xyz);
The fix ensures that the length of the variable name mentioned in a
jsonpath expression matches exactly with the name of the PASSING
variable before comparing the strings using strncmp().
Reported-by: Alvaro Herrera (off-list)
Discussion: https://postgr.es/m/CA+HiwqFGkLWMvELBH6E4SQ45qUHthgcRH6gCJL20OsYDRtFx_w@mail.gmail.com
Diffstat (limited to 'src/backend/executor/execExpr.c')
| -rw-r--r-- | src/backend/executor/execExpr.c | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/backend/executor/execExpr.c b/src/backend/executor/execExpr.c index b9ebc827a74..2bf86d06ef5 100644 --- a/src/backend/executor/execExpr.c +++ b/src/backend/executor/execExpr.c @@ -4278,6 +4278,7 @@ ExecInitJsonExpr(JsonExpr *jsexpr, ExprState *state, JsonPathVariable *var = palloc(sizeof(*var)); var->name = argname->sval; + var->namelen = strlen(var->name); var->typid = exprType((Node *) argexpr); var->typmod = exprTypmod((Node *) argexpr); |