Re: BUG #19433: json_object_agg_unique Crashes When Used as Window Function

From: Dmitry Dolgov <9erthalion6(at)gmail(dot)com>
To: 303677365(at)qq(dot)com, pgsql-bugs(at)lists(dot)postgresql(dot)org
Subject: Re: BUG #19433: json_object_agg_unique Crashes When Used as Window Function
Date: 2026-03-13 10:41:05
Message-ID: s6pzvce3crwjonox4bhzvpra5ifxpvgcopxjwu74e22ns3o3c6@4p7iua2m746b
Views: Whole Thread | Raw Message | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

> On Fri, Mar 13, 2026 at 03:14:26AM +0000, PG Bug reporting form wrote:
> The following bug has been logged on the website:
>
> Bug reference: 19433
> Logged by: chunling qin
> Email address: 303677365(at)qq(dot)com
> PostgreSQL version: 15.0
> Operating system: centos
> Description:
>
> ## Summary
>
> `json_object_agg_unique()` causes a segmentation fault when used as a window
> function with `ORDER BY` clause. The crash occurs due to a use-after-free
> bug where the internal hash table pointer is accessed after being freed.
>
> ---
>
> ## Environment
>
> | Item | Value |
> |------|-------|
> | PostgreSQL Version | 15devel (development build) |
> | Commit | 7103ebb7aa |
> | Platform | x86_64-pc-linux-gnu |
> | Test Date | 2026-03-13 |

I think the problem you describe was fixed in 4eb97988796, which became
part of REL_15_RC1.

In response to

Browse pgsql-bugs by date

  From Date Subject
Next Message Laurenz Albe 2026-03-13 16:37:45 Re: BUG #19432: recovery fails at invalid checkpoint record
Previous Message Felix Hamme 2026-03-13 08:35:39 Re: BUG #19432: recovery fails at invalid checkpoint record