postgres
diff --git a/‎src/backend/access/transam/xlogreader.c
Copy file name to clipboardExpand all lines: src/backend/access/transam/xlogreader.c
+11Lines changed: 11 additions & 0 deletions b/‎src/backend/access/transam/xlogreader.c
Copy file name to clipboardExpand all lines: src/backend/access/transam/xlogreader.c
+11Lines changed: 11 additions & 0 deletions
diff --git a/‎src/test/recovery/t/039_end_of_wal.pl
Copy file name to clipboardExpand all lines: src/test/recovery/t/039_end_of_wal.pl
+13Lines changed: 13 additions & 0 deletions b/‎src/test/recovery/t/039_end_of_wal.pl
Copy file name to clipboardExpand all lines: src/test/recovery/t/039_end_of_wal.pl
+13Lines changed: 13 additions & 0 deletions
@@ -653,6 +653,15 @@ XLogDecodeNextRecord(XLogReaderState *state, bool nonblocking)
 	}
 	else
 	{
+		/* There may be no next page if it's too small. */
+		if (total_len < SizeOfXLogRecord)
+		{
+			report_invalid_record(state,
+								  "invalid record length at %X/%X: expected at least %u, got %u",
+								  LSN_FORMAT_ARGS(RecPtr),
+								  (uint32) SizeOfXLogRecord, total_len);
+			goto err;
+		}
 		/* We'll validate the header once we have the next page. */
 		gotheader = false;
 	}
@@ -1190,6 +1199,8 @@ ValidXLogRecord(XLogReaderState *state, XLogRecord *record, XLogRecPtr recptr)
 {
 	pg_crc32c	crc;
 
+	Assert(record->xl_tot_len >= SizeOfXLogRecord);
+
 	/* Calculate the CRC */
 	INIT_CRC32C(crc);
 	COMP_CRC32C(crc, ((char *) record) + SizeOfXLogRecord, record->xl_tot_len - SizeOfXLogRecord);
 
@@ -281,6 +281,19 @@ sub advance_to_record_splitting_zone
 		$log_size),
 	"xl_tot_len short");
 
+# xl_tot_len in final position, not big enough to span into a new page but
+# also not eligible for regular record header validation
+emit_message($node, 0);
+$end_lsn = advance_to_record_splitting_zone($node);
+$node->stop('immediate');
+write_wal($node, $TLI, $end_lsn, build_record_header(1));
+$log_size = -s $node->logfile;
+$node->start;
+ok( $node->log_contains(
+		"invalid record length at .*: expected at least 24, got 1", $log_size
+	),
+	"xl_tot_len short at end-of-page");
+
 # Need more pages, but xl_prev check fails first.
 emit_message($node, 0);
 $end_lsn = advance_out_of_record_splitting_zone($node);