Received: from malur.postgresql.org ([217.196.149.56])
	by arkaria.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <pgpool-hackers-owner+archive@lists.postgresql.org>)
	id 1wXoug-003Uvg-0f
	for pgpool-hackers@arkaria.postgresql.org;
	Thu, 11 Jun 2026 23:34:18 +0000
Received: from localhost ([127.0.0.1] helo=malur.postgresql.org)
	by malur.postgresql.org with esmtp (Exim 4.96)
	(envelope-from <pgpool-hackers-owner+archive@lists.postgresql.org>)
	id 1wXouf-00HJng-0Y
	for pgpool-hackers@arkaria.postgresql.org;
	Thu, 11 Jun 2026 23:34:17 +0000
Received: from makus.postgresql.org ([2001:4800:3e1:1::229])
	by malur.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <ishii@postgresql.org>)
	id 1wXouf-00HJnY-01
	for pgpool-hackers@lists.postgresql.org;
	Thu, 11 Jun 2026 23:34:17 +0000
Received: from meldrar.postgresql.org ([2a02:c0:301:0:ffff::31])
	by makus.postgresql.org with esmtps  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.98.2)
	(envelope-from <ishii@postgresql.org>)
	id 1wXouc-00000002FnH-3dhT
	for pgpool-hackers@lists.postgresql.org;
	Thu, 11 Jun 2026 23:34:16 +0000
DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed;
	d=postgresql.org; s=20171124; h=Content-Transfer-Encoding:Content-Type:
	Mime-Version:References:In-Reply-To:From:Subject:Cc:To:Message-Id:Date:Sender
	:Reply-To:Content-ID:Content-Description;
	bh=GpSqo0qeXA6IfRlf/UjuZd5q0upAs6tUo6i7j8Hw3uc=; b=cGk+lI3Zsyh1X7SHa3g6/UvNMX
	YEa5Txr7oijAUN3iOLhAl2DlWfHJkQwY1QmtU5trvGQrMejY9wRMMSGGzCH0vF5lhu2a91b9aEeAF
	/6e6qpjyrUsbdFIKZ5G7yzaT1c4NEsu/CosMViDLUgV1yixB+8P3hqFLcyUZdk86ihjXSYiJvxhSo
	FwvSwRvw93+0/83ROkzNsw1buM6Mi4ps9Kknb7Qxn82u28sRpvi0tCov0YCKKfy3936AmMlNCrXUr
	Apco2iYLOlEIGwvqCKHt/iQXLaWG7bGmpR4eDzdOYEvlXMTTmrqiorLP66r4lXwrFeuBfc+7EAym2
	w/1P3lkw==;
Received: from [2409:11:4120:300:1f3d:d26f:a0b7:8a77] (helo=localhost)
	by meldrar.postgresql.org with esmtpsa  (TLS1.3) tls
 TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384
	(Exim 4.96)
	(envelope-from <ishii@postgresql.org>)
	id 1wXouZ-007UWs-1W;
	Thu, 11 Jun 2026 23:34:13 +0000
Date: Fri, 12 Jun 2026 08:34:01 +0900 (JST)
Message-Id: <20260612.083401.1143893563129592236.ishii@postgresql.org>
To: emond.papegaaij@gmail.com
Cc: pgpool-hackers@lists.postgresql.org
Subject: Re: Use-after-free crash
From: Tatsuo Ishii <ishii@postgresql.org>
In-Reply-To: 
 <CAGXsc+aFfv2_PUrEdCt8TousYP9dPmty3i+0mkJpWwVg=fVN+Q@mail.gmail.com>
References: 
 <CAGXsc+aFfv2_PUrEdCt8TousYP9dPmty3i+0mkJpWwVg=fVN+Q@mail.gmail.com>
X-Mailer: Mew version 6.8 on Emacs 29.3
Mime-Version: 1.0
Content-Type: Text/Plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
X-Host-Lookup-Failed: Reverse DNS lookup failed for
 2409:11:4120:300:1f3d:d26f:a0b7:8a77 (failed)
List-Id: <pgpool-hackers.lists.postgresql.org>
List-Help: <https://lists.postgresql.org/manage/>
List-Subscribe: <https://lists.postgresql.org/manage/>
List-Post: <mailto:pgpool-hackers@lists.postgresql.org>
List-Owner: <mailto:pgpool-hackers-owner@lists.postgresql.org>
List-Archive: <https://www.postgresql.org/list/pgpool-hackers>
Archived-At: 
 <https://www.postgresql.org/message-id/20260612.083401.1143893563129592236.ishii%40postgresql.org>
Precedence: bulk

Hi Emond,

> Hi,
> 
> Yesterday one of our tests detected a segmentation fault in pgpool,
> caused by a use-after-free. It is triggered during the shutdown of the
> process, so it probably isn't too harmful, but still I think it should
> be fixed. I've worked with Claude Code to build a patch (against 4.7)
> and a reproducer of the problem. The patch also contains a detailed
> explanation of how this crashes in the commit message. To run the
> reproducer:
> tar xzf pgpool-uaf-repro.tar.gz
> cd pgpool-uaf-repro
> PGPOOL=/path/to/their/pgpool ./reproduce.sh
> 
> Best regards,
> Emond

Thanks for the report. I will look into this.

Regards,
--
Tatsuo Ishii
SRA OSS K.K.
English: http://www.sraoss.co.jp/index_en/
Japanese:http://www.sraoss.co.jp