Re: [Bug] Heap Use After Free in Window Aggregate Execution

From: Alvaro Herrera <alvherre(at)alvh(dot)no-ip(dot)org>
To: David Rowley <dgrowleyml(at)gmail(dot)com>
Cc: pgsql-hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>, "zlabs-cstore(at)zohocorp(dot)com" <zlabs-cstore(at)zohocorp(dot)com>, Jayesh Dehankar <jayesh(dot)dp(at)zohocorp(dot)com>
Subject: Re: [Bug] Heap Use After Free in Window Aggregate Execution
Date: 2024-12-05 17:08:08
Message-ID: 202412051708.s36od6xck3jm@alvherre.pgsql
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-hackers

Hello,

Adding David Rowley in CC.

On 2024-Nov-13, Jayesh Dehankar wrote:

> We have discovered a bug in PostgreSQL v16.3 related to a top-level
> window aggregate with a partition-by clause. The issue occurs when the
> run condition fails, causing the window aggregate status to change
> from WINDOWAGG_RUN to WINDOWAGG_PASSTHROUGH_STRICT mode. The bug is
> present in the latest STABLE branch.

David, what do you think about this? The code in question was added by
your commits 9d9c02ccd1ae and a8583272218a, so I think you're the one
best prepared to handle this.

Thanks,

--
Álvaro Herrera 48°01'N 7°57'E — https://www.EnterpriseDB.com/

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Tom Lane 2024-12-05 18:07:03 Re: BUG #18734: pg_terminate_backend was unresponsive for processes with the status "active"
Previous Message PG Bug reporting form 2024-12-05 02:25:37 BUG #18735: Specific multibyte character in psql file path command parameter for Windows

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2024-12-05 17:23:14 Re: Potential null pointer dereference in postgres.c
Previous Message Bruce Momjian 2024-12-05 17:03:30 Re: attndims, typndims still not enforced, but make the value within a sane threshold