Richard Guo <guofenglinux(at)gmail(dot)com> writes:
> One thing I'm not quite sure about is whether we should backpatch this
> fix to pre-v17 branches. Prior to v17, estimate_array_length() wasn't
> taught to use statistics, so this error isn't reproducible there.
> OTOH, passing a root without a valid simple_rel_array to
> cost_qual_eval() still seems potentially unsafe. What do you think?
Yeah, "is there any other instance of this problem?" is the $64
question here. I was initially thinking v17 is sufficient, but
the possibility that some extension might be vulnerable makes
me lean to back-patching further. Your call ...
regards, tom lane