pgsql: Fix pg_trgm's picksplit function with all-true datums

Fix pg_trgm's picksplit function with all-true datums

The CACHESIGN.sign field is a BITVECP, not a TRGM, so you should not
use GETSIGN() on it. You don't get a compiler warning because the
GETSIGN() macro includes a cast. It resulted in a bogus read beyond
end of buffer, which would cause bad split decisions or a crash if
you're very unlucky.

Reported-by: Mehmet D. INCE <mehmet(at)mehmetince(dot)net>
Backpatch-through: 14
Security: CVE-2026-14678

Branch
------
REL_19_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/aa7b5815ea099763b1cfe01e431b0ec8312c943f
Author: Heikki Linnakangas <heikki(dot)linnakangas(at)iki(dot)fi>

Modified Files
--------------
contrib/pg_trgm/trgm_gist.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)