I said:
> So there's more to this than just killing
> a client that has a cursor.
OK, after digging some more, it seems that the critical requirement
is that the cursor's query contain a hash join. I've been able to
reproduce a crash here...
regards, tom lane