diff options
author | Tom Lane <tgl@sss.pgh.pa.us> | 2013-12-10 16:10:36 -0500 |
---|---|---|
committer | Tom Lane <tgl@sss.pgh.pa.us> | 2013-12-10 16:10:36 -0500 |
commit | 884c6384a2db34f6a65573e6bfd4b71dfba0de90 (patch) | |
tree | c70b43700806cb06f36551973e21e6d231da49bc /src/backend/regex/regexec.c | |
parent | 6c8b16e30a2f8f32087fe5bf77213613bb8f9b21 (diff) | |
download | postgresql-884c6384a2db34f6a65573e6bfd4b71dfba0de90.tar.gz postgresql-884c6384a2db34f6a65573e6bfd4b71dfba0de90.zip |
Fix possible crash with nested SubLinks.
An expression such as WHERE (... x IN (SELECT ...) ...) IN (SELECT ...)
could produce an invalid plan that results in a crash at execution time,
if the planner attempts to flatten the outer IN into a semi-join.
This happens because convert_testexpr() was not expecting any nested
SubLinks and would wrongly replace any PARAM_SUBLINK Params belonging
to the inner SubLink. (I think the comment denying that this case could
happen was wrong when written; it's certainly been wrong for quite a long
time, since very early versions of the semijoin flattening logic.)
Per report from Teodor Sigaev. Back-patch to all supported branches.
Diffstat (limited to 'src/backend/regex/regexec.c')
0 files changed, 0 insertions, 0 deletions