Re: BUG #19476: Segmentation fault in contrib/spi

From: Ayush Tiwari <ayushtiwari(dot)slg01(at)gmail(dot)com>
To: Nathan Bossart <nathandbossart(at)gmail(dot)com>
Cc: pierre(dot)forstmann(at)gmail(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #19476: Segmentation fault in contrib/spi
Date: 2026-05-14 17:12:07
Message-ID: CAJTYsWWWeQvL0JaLYArnunhKfX6=g3q1Mjq_ViipW6G011dfpQ@mail.gmail.com
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

Hi,

On Thu, 14 May 2026 at 22:15, Nathan Bossart <nathandbossart(at)gmail(dot)com>
wrote:

> On Thu, May 14, 2026 at 11:01:55AM -0500, Nathan Bossart wrote:
> > Regarding 0001, note that the refint docs state the following:
> >
> > Note that the primary/unique key columns should be marked NOT NULL
> and
> > should have a unique index.
> >
> > So maybe we could alternatively teach check_foreign_key() to either ERROR
> > or do nothing instead. On the other hand, given this case seemed to
> > accidentally work before the CVE fix, it's arguably worth fixing.
>
> Here is what I have staged for commit, which I intend to do shortly.
>
>
Thanks, this version looks good to me. The compact form is fine, and I
agree with preserving the pre-CVE behavior for this misconfigured case
rather than turning it into an ERROR or no-op.

I also agree with your earlier point about the parameterized 0002: using
the triggered relation's key types for parameters is not generally right
for the referencing relation's SET targets.

I think the cached cascade UPDATE plan issue is worth pursuing,
I'll start a different hackers thread on that
probably using the "don't cache cascade UPDATE plans" approach you
suggested.

Regards,
Ayush

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Nathan Bossart 2026-05-14 18:16:03 Re: BUG #19476: Segmentation fault in contrib/spi
Previous Message Nathan Bossart 2026-05-14 16:45:46 Re: BUG #19476: Segmentation fault in contrib/spi