Re: BUG #17909: CREATE SCHEMA AUTHORIZATION sch CREATE TABLE foo ( id INT ) will coredump

From: Richard Guo <guofenglinux(at)gmail(dot)com>
To: Michael Paquier <michael(at)paquier(dot)xyz>
Cc: hysong0101(at)163(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #17909: CREATE SCHEMA AUTHORIZATION sch CREATE TABLE foo ( id INT ) will coredump
Date: 2023-04-27 08:59:13
Message-ID: CAMbWs4-f5w+YCzqd90YAS-ogPxoahzfJ7C1QUUo8X+KE=0UC4w@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

On Thu, Apr 27, 2023 at 3:34 PM Michael Paquier <michael(at)paquier(dot)xyz> wrote:

> It took me a couple of minutes to get what you meant here. The point
> is that schema-qualifying any of the object specified after the CREATE
> SCHEMA with a schema name different than the rolname would cause a
> crash, when no schema is directly given. We should fail with the same
> error than when a schema is specified, as of, except that the rolename
> needs to be specified:
> =# create schema popo authorization postgres create table lala.aa (a int);
> ERROR: 42P15: CREATE specifies a schema (lala) different from the one
> being created (popo)

Aha, now I get the scenario that would crash.

# create schema authorization postgres create table lala.aa (a int);
server closed the connection unexpectedly

In this case the CreateSchemaStmtContext.schemaname is NULL since it is
not explicitly specified, while the schemaname in the schema element is
not NULL as it is specified, and setSchemaName cannot copy with such
situation. Maybe we should check against RoleSpec.rolename in this case
since that is also the schema's name?

> That seems quite old, at quick glance (v11 fails), so this needs to be
> fixed all the way down.

Yes. I can see this crash from master all back to v9.5.

Thanks
Richard

In response to

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Daniel Gustafsson 2023-04-27 09:01:41 Re: BUG #17910: gcc-introduced load may cause concurrency bug
Previous Message PG Bug reporting form 2023-04-27 08:45:15 BUG #17910: gcc-introduced load may cause concurrency bug