Fix SerializeSnapshot not to overrun the allocated space.

Rushabh Lathia

diff --git a/src/backend/utils/time/snapmgr.c b/src/backend/utils/time/snapmgr.c
index 2f0e9cda8c323753ca6099ea2322b0f8000eb3ff..6ef2df8a20a20429c5bb246ceedd86091bababd6 100644 (file)
--- a/src/backend/utils/time/snapmgr.c
+++ b/src/backend/utils/time/snapmgr.c
@@ -1515,7 +1515,7 @@ SerializeSnapshot(Snapshot snapshot, char *start_address)
     * snapshot taken during recovery; all the top-level XIDs are in subxip as
     * well in that case, so we mustn't lose them.
     */
-   if (snapshot->subxcnt > 0)
+   if (serialized_snapshot->subxcnt > 0)
    {
        Size        subxipoff = sizeof(SerializedSnapshotData) +
        snapshot->xcnt * sizeof(TransactionId);