amazon-aurora / babelfish_extensions / 27725382584

77%

main: 77%

push

github

Guard remote RPC result-set column count against fixed-size stack array

In execute_remote_procedure_rpc(), colcount comes from the remote server
(LINKED_SERVER_NUM_COLS) and indexes the fixed-size stack array
val[MAX_COLS_SELECT] (4096). A non-conforming or malicious remote server
returning more than MAX_COLS_SELECT columns would overflow the stack.
Add an explicit bound that raises an error before the array is used,
rather than relying on the remote peer to honor SQL Server's 4096-column
limit. Addresses an AI code-review finding.

1 of 2 new or added lines in 1 file covered. (50.0%)

54920 of 71147 relevant lines covered (77.19%)

390275.92 hits per line