Message-ID: <c3a380772c673400279409944bd5ad4db3ecebe2.camel@j-davis.com>
Subject: Re: BUG #19413: ASAN: stack-buffer-overflow in foldcase_options()
 with invalid ICU language tag
From: Jeff Davis <pgsql@j-davis.com>
To: n.kalinin@postgrespro.ru, pgsql-bugs@lists.postgresql.org
Date: Fri, 15 May 2026 09:59:39 -0700
In-Reply-To: <19413-cf98b0a31559b77b@postgresql.org>
References: <19413-cf98b0a31559b77b@postgresql.org>
Content-Type: text/plain; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable
User-Agent: Evolution 3.52.3-0ubuntu1.1 
MIME-Version: 1.0
Archived-At: 
 <https://www.postgresql.org/message-id/c3a380772c673400279409944bd5ad4db3ecebe2.camel%40j-davis.com>
Precedence: bulk

On Thu, 2026-02-19 at 05:26 +0000, PG Bug reporting form wrote:
> The following bug has been logged on the website:
>=20
> Bug reference:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 19413
> Logged by:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 Nikita K=
alinin
> Email address:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0 n.kalinin@postgrespro.ru
> PostgreSQL version: 18.2
> Operating system:=C2=A0=C2=A0 ubuntu 22.04
> Description:=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=C2=A0=20
>=20
> When building with ASAN:
> CPPFLAGS=3D"-O0 -ggdb3 -fno-omit-frame-pointer -fsanitize=3Daddress
> -fsanitize=3Dundefined -fno-sanitize-recover=3Dall
> -fno-sanitize=3Dnonnull-attribute -fstack-protector"
> LDFLAGS=3D"-fsanitize=3Daddress -fsanitize=3Dundefined"
>=20
> Runtime ASAN options:
> ASAN_OPTIONS=3Ddetect_leaks=3D0:abort_on_error=3D1:disable_coredump=3D0:s=
tric
> t_string_checks=3D1:check_initialization_order=3D1:strict_init_order=3D1:=
de
> tct_odr_violation=3D0:detect_stack_use_after_return=3D0
>=20
> The following queries:
> CREATE COLLATION lt_insensitive (provider =3D icu, locale =3D 'enu-ks-
> level1',
> deterministic =3D false);
> CREATE COLLATION lt_insensitive (provider =3D icu, locale =3D 'en-u-ks-
> level1',
> deterministic =3D false);
> CREATE COLLATION x (provider =3D icu, locale =3D 'en-u-ks-level1',
> deterministic
> =3D false);
> CREATE COLLATION lt_insensitive (provider =3D icu, locale =3D 'en-u-ks-
> level1',
> deterministic =3D false);

Thank you for the report. This appears to be fixed as of:

https://git.postgresql.org/gitweb/?p=3Dpostgresql.git;a=3Dcommit;h=3D06ce97=
b9994eca91250d7c28f0df9b1ae7829f36

due to another report that came later. This bug should have been
referenced in the commit -- sorry.

Let me know if this resolves the issue.

Regards,
	Jeff Davis