Release 1.3.1: transpiler audit memory-safety fixes (code-only patch)

Code-only patch (no catalog changes) carrying the fixes from the full-repo
transpiler audit (PR #1): the T_EOF token-array capacity guard, the int64
sb_ensure() growth/overflow clamp, check_stack_depth() at the recursion
guards, the Python indent-stack limit error, raw single-quoted strings for
Ruby/PHP, PHP ${name} interpolation, non-decimal integer literals rewritten
to decimal (with a clean out-of-range error), and the
-Wmissing-variable-declarations cleanup.

Bumps default_version and META.json to 1.3.1, adds plx--1.3.1.sql (identical
to 1.3.0) and the plx--1.3.0--1.3.1.sql version-advancing upgrade script.

Verified against PG18.4: clean build, all 13 installcheck tests pass, and the
1.3.0 -> 1.3.1 ALTER EXTENSION UPDATE applies cleanly.

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Author: plx

CHANGELOG.md

@@ -4,6 +4,43 @@ All notable changes to plx are recorded here. The format follows
 [Keep a Changelog](https://keepachangelog.com/), and plx uses the extension
 version in `plx.control` (currently `1.0`).
 
+## [1.3.1] - 2026-07-16
+
+Code-only patch release (no catalog changes) carrying the memory-safety and
+robustness fixes from the full-repo transpiler audit (#1). Upgrade with
+`ALTER EXTENSION plx UPDATE TO '1.3.1'` after installing the new module.
+
+### Fixed
+
+- Missing capacity guard on the trailing `T_EOF` token write in `lex()`: a source
+  that lexed to exactly `cap-1` tokens overflowed the token array by one
+  (heap overflow / SIGSEGV). All token writes are now guarded.
+- `plx_strbuild` `sb_ensure()` doubled its capacity in `int32`, which could wrap
+  negative near ~1GB and spin forever while passing a bogus size to `repalloc`.
+  Growth is now computed in 64-bit and clamped to `MaxAllocSize`, so an
+  oversized request raises the standard allocation error cleanly.
+- The recursion-guarded transpiler entry points now call `check_stack_depth()`,
+  so deeply nested hostile input raises a clean error honoring `max_stack_depth`
+  instead of overflowing the C stack and crashing the backend.
+- The Python lexer raises a clean "indentation nested too deeply" error at the
+  indent-stack limit instead of emitting an unbalanced `T_INDENT` that mis-nested
+  every enclosing block.
+- Raw single-quoted strings in Ruby and PHP keep backslashes literal (`'\n'`,
+  `'C:\temp'`); only `\\` and `\'` are special. Double-quoted and Python/JS
+  single-quoted escapes are unchanged.
+- PHP `${name}` curly interpolation in double-quoted strings is now recognized
+  (was emitted verbatim).
+- Non-decimal integer literals (`0x`/`0o`/`0b`, with `_` group separators) are
+  lexed as a single token and rewritten to decimal, keeping generated plpgsql
+  portable to PG13-15 (which accept `0x/0o/0b` only on PG16+). A literal that
+  overflows 64 bits raises a clean "integer literal out of range" error rather
+  than emitting invalid SQL.
+
+### Other
+
+- Declare the built-in dialect descriptors in `plx.h`, clearing
+  `-Wmissing-variable-declarations` across the dialect translation units.
+
 ## [1.3.0] - 2026-07-15
 
 Trigger row mutation across dialects, plus the cookbook and limitations

META.json

@@ -2,17 +2,17 @@
    "name": "plx",
    "abstract": "Write PostgreSQL functions in Ruby, PHP, JavaScript, TypeScript, Python, Go, COBOL, Oracle PL/SQL, or Transact-SQL, compiled to plpgsql",
    "description": "plx is a dialect-pluggable procedural language for PostgreSQL. A function body written in a Ruby, PHP, JavaScript, TypeScript, Python, Go, COBOL, Oracle PL/SQL, or Transact-SQL (SQL Server) dialect is transpiled to plpgsql at CREATE FUNCTION time and stored in pg_proc.prosrc, then executed by the standard plpgsql interpreter. There is no separate language runtime in the backend, the generated plpgsql is visible in the catalog, and every plpgsql construct is reachable from every dialect. plx also ships plx_strbuild, an expanded-object string builder with amortized-O(1) append that fixes plpgsql's quadratic in-loop string concatenation.",
-   "version": "1.3.0",
+   "version": "1.3.1",
    "maintainer": [
       "Command Prompt, Inc. <pgxn@commandprompt.com>"
    ],
    "license": "mit",
    "provides": {
       "plx": {
          "abstract": "Dialect-pluggable procedural language over plpgsql (Ruby, PHP, JavaScript, TypeScript, Python, Go, COBOL, Oracle PL/SQL, Transact-SQL)",
-         "file": "plx--1.3.0.sql",
+         "file": "plx--1.3.1.sql",
          "docfile": "README.md",
-         "version": "1.3.0"
+         "version": "1.3.1"
       }
    },
    "prereqs": {

Makefile

@@ -3,7 +3,7 @@ MODULE_big = plx
 OBJS = src/plx_core.o src/plx_transpile.o src/plx_strbuild.o src/plx_dialect_ruby.o src/plx_dialect_php.o src/plx_dialect_js.o src/plx_dialect_python.o src/plx_dialect_cobol.o src/plx_dialect_plsql.o src/plx_dialect_ts.o src/plx_dialect_tsql.o src/plx_dialect_go.o
 
 EXTENSION = plx
-DATA = plx--1.0.sql plx--1.1.sql plx--1.1.1.sql plx--1.2.sql plx--1.2.1.sql plx--1.2.2.sql plx--1.3.0.sql plx--1.0--1.1.sql plx--1.1--1.1.1.sql plx--1.1.1--1.2.sql plx--1.2--1.2.1.sql plx--1.2.1--1.2.2.sql plx--1.2.2--1.3.0.sql
+DATA = plx--1.0.sql plx--1.1.sql plx--1.1.1.sql plx--1.2.sql plx--1.2.1.sql plx--1.2.2.sql plx--1.3.0.sql plx--1.3.1.sql plx--1.0--1.1.sql plx--1.1--1.1.1.sql plx--1.1.1--1.2.sql plx--1.2--1.2.1.sql plx--1.2.1--1.2.2.sql plx--1.2.2--1.3.0.sql plx--1.3.0--1.3.1.sql
 
 # pg_regress suite (make installcheck). test/run_corpus.py is an additional
 # Ruby corpus runner.

plx--1.3.0--1.3.1.sql

@@ -0,0 +1,6 @@
+/* plx 1.3.0 -> 1.3.1: no catalog changes.
+ *
+ * 1.3.1 is a code-only patch: memory-safety and robustness fixes in the shared
+ * transpiler and string builder (loadable module $libdir/plx). No SQL objects
+ * the extension defines change, so this update script only advances the recorded
+ * version. Installing the matching $libdir/plx is what delivers the fixes. */

plx--1.3.1.sql

@@ -0,0 +1,209 @@
+/* plx 1.0: registers the plx dialect languages and the string-builder type */
+
+\echo Use "CREATE EXTENSION plx" to load this file. \quit
+
+/*
+ * plx_strbuild: an expanded-object string builder. Its flattened form is a
+ * text-compatible varlena, so it casts to and from text without a function.
+ * plx_sb_append grows the buffer in place across a loop (amortized O(1)),
+ * avoiding the quadratic cost of `s := s || 'x'` on plain text.
+ */
+CREATE TYPE plx_strbuild;
+
+CREATE FUNCTION plx_sb_in(cstring) RETURNS plx_strbuild
+	AS '$libdir/plx', 'plx_sb_in' LANGUAGE C IMMUTABLE STRICT;
+CREATE FUNCTION plx_sb_out(plx_strbuild) RETURNS cstring
+	AS '$libdir/plx', 'plx_sb_out' LANGUAGE C IMMUTABLE STRICT;
+
+CREATE TYPE plx_strbuild (
+	INPUT = plx_sb_in,
+	OUTPUT = plx_sb_out,
+	LIKE = text,
+	STORAGE = extended
+);
+
+CREATE FUNCTION plx_sb_append_support(internal) RETURNS internal
+	AS '$libdir/plx', 'plx_sb_append_support' LANGUAGE C;
+
+CREATE FUNCTION plx_sb_append(plx_strbuild, text) RETURNS plx_strbuild
+	AS '$libdir/plx', 'plx_sb_append' LANGUAGE C IMMUTABLE
+	SUPPORT plx_sb_append_support;
+
+-- plx_strbuild is implicitly usable as text (so it works in RETURN, string
+-- functions, and concatenation). text becomes a builder only in assignment
+-- context, which avoids operator ambiguity such as `builder || text`.
+CREATE CAST (plx_strbuild AS text) WITHOUT FUNCTION AS IMPLICIT;
+CREATE CAST (text AS plx_strbuild) WITHOUT FUNCTION AS ASSIGNMENT;
+
+/*
+ * Runtime call handler = plpgsql's OWN handler. Binding a fresh pg_proc row to
+ * plpgsql.so's exported symbol is legal (CreateProceduralLanguage only checks
+ * the handler RETURNS language_handler). Execution is therefore 100% stock
+ * plpgsql; plx contributes zero call-path C.
+ */
+CREATE FUNCTION plx_call_handler()
+	RETURNS language_handler
+	AS '$libdir/plpgsql', 'plpgsql_call_handler'
+	LANGUAGE C;
+
+/* Ruby dialect validator + inline handler live in plx.so */
+CREATE FUNCTION plx_ruby_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_ruby_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_ruby_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_ruby_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxruby
+	HANDLER plx_call_handler
+	INLINE plx_ruby_inline_handler
+	VALIDATOR plx_ruby_validator;
+
+COMMENT ON LANGUAGE plxruby IS 'plx Ruby dialect (transpiles to plpgsql)';
+
+/* PHP dialect */
+CREATE FUNCTION plx_php_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_php_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_php_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_php_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxphp
+	HANDLER plx_call_handler
+	INLINE plx_php_inline_handler
+	VALIDATOR plx_php_validator;
+
+COMMENT ON LANGUAGE plxphp IS 'plx PHP dialect (transpiles to plpgsql)';
+
+/* JavaScript dialect */
+CREATE FUNCTION plx_js_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_js_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_js_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_js_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxjs
+	HANDLER plx_call_handler
+	INLINE plx_js_inline_handler
+	VALIDATOR plx_js_validator;
+
+COMMENT ON LANGUAGE plxjs IS 'plx JavaScript dialect (transpiles to plpgsql)';
+
+/* Python dialect */
+CREATE FUNCTION plx_py_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_py_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_py_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_py_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxpython3
+	HANDLER plx_call_handler
+	INLINE plx_py_inline_handler
+	VALIDATOR plx_py_validator;
+
+COMMENT ON LANGUAGE plxpython3 IS 'plx Python dialect (transpiles to plpgsql)';
+
+/* COBOL dialect (ISO/IEC 1989:2023) validator + inline handler live in plx.so */
+CREATE FUNCTION plx_cob_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_cob_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_cob_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_cob_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxcobol
+	HANDLER plx_call_handler
+	INLINE plx_cob_inline_handler
+	VALIDATOR plx_cob_validator;
+
+COMMENT ON LANGUAGE plxcobol IS 'plx COBOL dialect (ISO/IEC 1989:2023, transpiles to plpgsql)';
+
+/* PL/SQL dialect (Oracle) validator + inline handler live in plx.so */
+CREATE FUNCTION plx_plsql_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_plsql_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_plsql_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_plsql_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxplsql
+	HANDLER plx_call_handler
+	INLINE plx_plsql_inline_handler
+	VALIDATOR plx_plsql_validator;
+
+COMMENT ON LANGUAGE plxplsql IS 'plx Oracle PL/SQL dialect (transpiles to plpgsql)';
+
+/* TypeScript dialect validator + inline handler live in plx.so */
+CREATE FUNCTION plx_ts_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_ts_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_ts_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_ts_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxts
+	HANDLER plx_call_handler
+	INLINE plx_ts_inline_handler
+	VALIDATOR plx_ts_validator;
+
+COMMENT ON LANGUAGE plxts IS 'plx TypeScript dialect (transpiles to plpgsql)';
+
+/* T-SQL dialect (Transact-SQL) validator + inline handler live in plx.so */
+CREATE FUNCTION plx_tsql_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_tsql_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_tsql_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_tsql_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxtsql
+	HANDLER plx_call_handler
+	INLINE plx_tsql_inline_handler
+	VALIDATOR plx_tsql_validator;
+
+COMMENT ON LANGUAGE plxtsql IS 'plx Transact-SQL (SQL Server) dialect (transpiles to plpgsql)';
+
+/* Go dialect validator + inline handler live in plx.so */
+CREATE FUNCTION plx_go_validator(oid)
+	RETURNS void
+	AS '$libdir/plx', 'plx_go_validator'
+	LANGUAGE C STRICT;
+
+CREATE FUNCTION plx_go_inline_handler(internal)
+	RETURNS void
+	AS '$libdir/plx', 'plx_go_inline_handler'
+	LANGUAGE C;
+
+CREATE TRUSTED LANGUAGE plxgo
+	HANDLER plx_call_handler
+	INLINE plx_go_inline_handler
+	VALIDATOR plx_go_validator;
+
+COMMENT ON LANGUAGE plxgo IS 'plx Go dialect (transpiles to plpgsql)';

plx.control

@@ -1,4 +1,4 @@
 comment = 'plx (plExcellent): dialect-pluggable procedural language over plpgsql'
-default_version = '1.3.0'
+default_version = '1.3.1'
 module_pathname = '$libdir/plx'
 relocatable = true