diff options
author | Peter Geoghegan <pg@bowt.ie> | 2023-09-28 16:29:37 -0700 |
---|---|---|
committer | Peter Geoghegan <pg@bowt.ie> | 2023-09-28 16:29:37 -0700 |
commit | 714780dcddf01865aa4323fedec59ffbefc7e707 (patch) | |
tree | 0803d0abd615820fd257954aacf12811dbaa629b /src/backend/executor/nodeModifyTable.c | |
parent | 9f71e10d65fa2db7cde9fe1554f89a9526904eb9 (diff) | |
download | postgresql-714780dcddf01865aa4323fedec59ffbefc7e707.tar.gz postgresql-714780dcddf01865aa4323fedec59ffbefc7e707.zip |
Fix btmarkpos/btrestrpos array key wraparound bug.
nbtree's mark/restore processing failed to correctly handle an edge case
involving array key advancement and related search-type scan key state.
Scans with ScalarArrayScalarArrayOpExpr quals requiring mark/restore
processing (for a merge join) could incorrectly conclude that an
affected array/scan key must not have advanced during the time between
marking and restoring the scan's position.
As a result of all this, array key handling within btrestrpos could skip
a required call to _bt_preprocess_keys(). This confusion allowed later
primitive index scans to overlook tuples matching the true current array
keys. The scan's search-type scan keys would still have spurious values
corresponding to the final array element(s) -- not values matching the
first/now-current array element(s).
To fix, remember that "array key wraparound" has taken place during the
ongoing btrescan in a flag variable stored in the scan's state, and use
that information at the point where btrestrpos decides if another call
to _bt_preprocess_keys is required.
Oversight in commit 70bc5833, which taught nbtree to handle array keys
during mark/restore processing, but missed this subtlety. That commit
was itself a bug fix for an issue in commit 9e8da0f7, which taught
nbtree to handle ScalarArrayOpExpr quals natively.
Author: Peter Geoghegan <pg@bowt.ie>
Discussion: https://postgr.es/m/CAH2-WzkgP3DDRJxw6DgjCxo-cu-DKrvjEv_ArkP2ctBJatDCYg@mail.gmail.com
Backpatch: 11- (all supported branches).
Diffstat (limited to 'src/backend/executor/nodeModifyTable.c')
0 files changed, 0 insertions, 0 deletions