fix: avoid integer overflow when sending large arguments (#946)

If an argument is larger than 200MB it would overflow during escaping due to optimistic size estimation.
Change size estimation so it works for even larger arguments until StringBuilder crashes with negative size error.

pgjdbc/src/main/java/org/postgresql/core/Utils.java

@@ -68,7 +68,7 @@ public static String toHexString(byte[] data) {
   public static StringBuilder escapeLiteral(StringBuilder sbuf, String value,
       boolean standardConformingStrings) throws SQLException {
     if (sbuf == null) {
-      sbuf = new StringBuilder(value.length() * 11 / 10); // Add 10% for escaping.
+      sbuf = new StringBuilder((value.length() + 10) / 10 * 11); // Add 10% for escaping.
     }
     doAppendEscapedLiteral(sbuf, value, standardConformingStrings);
     return sbuf;
@@ -136,7 +136,7 @@ private static void doAppendEscapedLiteral(Appendable sbuf, String value,
   public static StringBuilder escapeIdentifier(StringBuilder sbuf, String value)
       throws SQLException {
     if (sbuf == null) {
-      sbuf = new StringBuilder(2 + value.length() * 11 / 10); // Add 10% for escaping.
+      sbuf = new StringBuilder(2 + (value.length() + 10) / 10 * 11); // Add 10% for escaping.
     }
     doAppendEscapedIdentifier(sbuf, value);
     return sbuf;

pgjdbc/src/main/java/org/postgresql/core/v3/SimpleParameterList.java

@@ -214,7 +214,7 @@ public String toString(int index, boolean standardConformingStrings) {
       String param = paramValues[index].toString();
 
       // add room for quotes + potential escaping.
-      StringBuilder p = new StringBuilder(3 + param.length() * 11 / 10);
+      StringBuilder p = new StringBuilder(3 + (param.length() + 10) / 10 * 11);
 
       // No E'..' here since escapeLiteral escapes all things and it does not use \123 kind of
       // escape codes

pgjdbc/src/test/java/org/postgresql/test/jdbc4/LogTest.java

@@ -0,0 +1,78 @@
+/*
+ * Copyright (c) 2007, PostgreSQL Global Development Group
+ * See the LICENSE file in the project root for more information.
+ */
+
+package org.postgresql.test.jdbc4;
+
+import org.postgresql.PGProperty;
+import org.postgresql.test.TestUtil;
+import org.postgresql.test.jdbc2.BaseTest4;
+
+import org.junit.Assert;
+import org.junit.Assume;
+import org.junit.Test;
+import org.junit.runner.RunWith;
+import org.junit.runners.Parameterized;
+
+import java.sql.Array;
+import java.sql.PreparedStatement;
+import java.sql.ResultSet;
+import java.sql.SQLException;
+import java.util.ArrayList;
+import java.util.Collection;
+import java.util.Properties;
+
+@RunWith(Parameterized.class)
+public class LogTest extends BaseTest4 {
+
+  private String oldLevel;
+
+  public LogTest(BinaryMode binaryMode) {
+    setBinaryMode(binaryMode);
+    long maxMemory = Runtime.getRuntime().maxMemory();
+    if (maxMemory < 6L * 1024 * 1024 * 1024) {
+      // TODO: add hamcrest matches and replace with "greaterThan" or something like that
+      Assume.assumeTrue(
+          "The test requires -Xmx6g or more. MaxMemory is " + (maxMemory / 1024.0 / 1024) + " MiB",
+          false);
+    }
+  }
+
+  @Parameterized.Parameters(name = "binary = {0}")
+  public static Iterable<Object[]> data() {
+    Collection<Object[]> ids = new ArrayList<Object[]>();
+    for (BinaryMode binaryMode : BinaryMode.values()) {
+      ids.add(new Object[]{binaryMode});
+    }
+    return ids;
+  }
+
+  @Override
+  protected void updateProperties(Properties props) {
+    super.updateProperties(props);
+    PGProperty.LOGGER_LEVEL.set(props, "TRACE");
+  }
+
+  @Test
+  public void reallyLargeArgumentsBreaksLogging() throws SQLException {
+    String[] largeInput = new String[220];
+    String largeString = String.format("%1048576s", " ");
+    for (int i = 0; i < largeInput.length; i++) {
+      largeInput[i] = largeString;
+    }
+    Array arr = con.createArrayOf("text", largeInput);
+    PreparedStatement ps = con.prepareStatement("select t from unnest(?::text[]) t");
+    ps.setArray(1, arr);
+    ResultSet rs = ps.executeQuery();
+    int x = 0;
+    while (rs.next()) {
+      x += 1;
+      String found = rs.getString(1);
+      Assert.assertEquals(largeString, found);
+    }
+    Assert.assertEquals(largeInput.length, x);
+    TestUtil.closeQuietly(rs);
+    TestUtil.closeQuietly(ps);
+  }
+}