Re: BUG #17972: Assert failed in pull_varattnos_walker() for view with subquery and security qual

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: exclusion(at)gmail(dot)com
Cc: pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #17972: Assert failed in pull_varattnos_walker() for view with subquery and security qual
Date: 2023-06-13 20:06:57
Message-ID: 1798406.1686686817@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

PG Bug reporting form <noreply(at)postgresql(dot)org> writes:
> The following script:
> CREATE TABLE t1(a int);
> CREATE VIEW v1 WITH (security_barrier = true) AS SELECT a FROM t1;
> CREATE RULE v1_upd_rule AS ON UPDATE TO v1 DO INSTEAD UPDATE t1 SET a =
> NEW.a WHERE a = OLD.a;
> CREATE VIEW v2 WITH (security_barrier = true) AS SELECT a FROM v1 WHERE
> EXISTS (SELECT 1);
> UPDATE v2 SET a = 1;

> leads to a failed assertion with the stack trace:

Thanks for the report!

pull_varattnos is not at fault here. The problem is that we missed
converting that SubLink to a SubPlan earlier, because hasSubLinks
wasn't set in the parent Query, so we never called SS_process_sublinks.
After some digging, I found the cause: rewriteRuleAction neglected to
check for SubLink nodes in the securityQuals of range table entries.

> `git bisect` for this anomaly pointed at 215b43cdc.

I think this is just accidental, probably an artifact of the
specific test case. The oversight in rewriteRuleAction is as
old as the existence of RangeTblEntry.securityQuals, unless it
was impossible to write a SubLink in security quals before,
which I doubt.

regards, tom lane

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message PG Bug reporting form 2023-06-13 23:49:27 BUG #17973: Reinit of pgstats entry for dropped DB can break autovacuum daemon
Previous Message PG Bug reporting form 2023-06-13 16:00:01 BUG #17972: Assert failed in pull_varattnos_walker() for view with subquery and security qual