pgsql: Harden range_table_mutator() against null RangeTblEntry.subquery

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: pgsql-committers(at)lists(dot)postgresql(dot)org
Subject: pgsql: Harden range_table_mutator() against null RangeTblEntry.subquery
Date: 2022-06-26 12:58:28
Message-ID: E1o5RqO-001uCT-JP@gemulon.postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Harden range_table_mutator() against null RangeTblEntry.subquery.

Commit 64919aaab made pull_up_simple_subquery set rte->subquery = NULL
after doing the deed, so that we don't waste cycles copying a
now-useless subquery tree around. This turns out to create a core dump
hazard in range_table_mutator, which supposes that that field is never
NULL. Apparently none of our own code invokes query_tree_mutator or
range_table_mutator on the top Query after subquery pullup; but it
wouldn't be surprising if outside code does, and anyway I'm working
on a v16 patch that will need it.

We can fix this cleanly by just getting rid of the special-case
handling of this field and treating it more like all the rest.
I think the special case might be left over from a time when
QTW_DONT_COPY_QUERY was the default behavior, but that was eons ago.

Thanks to Dean Rasheed for review.

Discussion: https://postgr.es/m/545569.1656107045@sss.pgh.pa.us

Branch
------
master

Details
-------
https://git.postgresql.org/pg/commitdiff/ebc584ed495d7ad3a3f33db4e75d9543ff6a87d1

Modified Files
--------------
src/backend/nodes/nodeFuncs.c | 16 ++++------------
1 file changed, 4 insertions(+), 12 deletions(-)

Browse pgsql-committers by date

  From Date Subject
Next Message Thomas Munro 2022-06-27 01:11:26 pgsql: Fix relptr's encoding of the base address.
Previous Message Thomas Munro 2022-06-25 23:16:51 pgsql: Don't trust signalfd() on illumos.