pg.ddx.io  pgsql-bugs@postgresql.org mailing list archive  

help / color / mirror / Atom feed

From: fjz22@mails.tsinghua.edu.cn
To: pgsql-bugs@lists.postgresql.org
Cc: ljiee@mail.tsinghua.edu.cn
Cc: wuzy21@mails.tsinghua.edu.cn
Subject:  9. PostgreSQL Server 15.2 Subprocess Went down at function 'expanded_record_set_fields'
Date: Fri, 14 Apr 2023 00:47:15 +0800
Message-ID: <00dd01d96e27$9a8ca9f0$cfa5fdd0$@mails.tsinghua.edu.cn> (raw)

Description: PostgreSQL Server 15.2 Subprocess Went down at function
'expanded_record_set_fields'

PostgreSQL Server Version: PostgreSQL 15.2 on x86_64-pc-linux-gnu, compiled
by Ubuntu clang version 12.0.1, 64-bit

Discoverer: Jingzhou Fu, Jie Liang and Zhiyong Wu in WingTecher Lab of
Tsinghua University and Shuimuyulin ltd

Email address: fjz22@mails.tsinghua.edu.cn  ,   wuzy21@mails.tsinghua.edu.cn
,  ljiee@mail.tsinghua.edu.cn

 

Way to Reproduce with Docker (write the poc content into file PoC.sql):

```bash

docker container rm some-postgres -f

docker run --name some-postgres -p 5432:5432 -e
POSTGRES_PASSWORD=mysecretpassword -d postgres:15.2

 

sleep 5 # wait the server start .

 

docker exec -i some-postgres psql --user=postgres < PoC.sql

 

# Output:

#   server closed the connection unexpectedly

#          This probably means the server terminated abnormally

#          before or while processing the request.

#   connection to server was lost

```

 

PoC:

```sql

CREATE FUNCTION command(cstring)

   RETURNS test_extdep_commands

   AS 'int4in'

   LANGUAGE internal STRICT IMMUTABLE;

CREATE FUNCTION inet_tbl(test_extdep_commands)

   RETURNS cstring

   AS 'int4out'

   LANGUAGE internal STRICT IMMUTABLE;

 

CREATE TYPE test_extdep_commands (

   internallength = variable,

   input = command,

   output = inet_tbl,

   alignment = int4,

   default = 'zippo'

);

CREATE TYPE inet_idx3 AS (f1 test_extdep_commands, f2 test_extdep_commands);

CREATE FUNCTION _return(x int, y int, z int)

  RETURNS inet_idx3 AS $$

declare v inet_idx3 := row(x, y);

begin

v.test_pg_dump_t1 := z;

return v;

end

$$ LANGUAGE plpgsql;

SELECT * FROM _return(1,2,0); 

```

 

Backtrace:

```

#0 0x18480e0 (expanded_record_set_fields+0x4a0)

#1 0x7f2a94004ae8 (exec_move_row_from_fields+0xe48)

#2 0x7f2a93fd703c (exec_move_row+0x7fc)

#3 0x7f2a93fd6730 (exec_move_row_from_datum+0x17b0)

#4 0x7f2a93fdf4e5 (exec_assign_value+0xed5)

#5 0x7f2a93fe0178 (exec_assign_expr+0x408)

#6 0x7f2a93fdcaf8 (exec_stmt_block+0x708)

#7 0x7f2a93fd7574 (exec_toplevel_block+0x234)

#8 0x7f2a93fd1023 (plpgsql_exec_function+0x11f3)

#9 0x7f2a9403481f (plpgsql_call_handler+0x86f)

#10 0xee3b21 (ExecMakeTableFunctionResult+0xf31)

#11 0xf47d9d (FunctionNext+0x37d)

#12 0xee8cd0 (ExecScanFetch+0x7d0)

#13 0xee8207 (ExecScan+0x107)

#14 0xf46b91 (ExecFunctionScan+0x31)

#15 0xedbf36 (ExecProcNodeFirst+0x116)

#16 0xec0e2c (ExecProcNode+0x7c)

#17 0xeb3a9f (ExecutePlan+0x1df)

#18 0xeb3780 (standard_ExecutorRun+0x550)

#19 0xeb3224 (ExecutorRun+0x64)

#20 0x16f6361 (PortalRunSelect+0x241)

#21 0x16f53bd (PortalRun+0x7ed)

#22 0x16e9694 (exec_simple_query+0xe04)

#23 0x16e7a63 (PostgresMain+0x1523)

#24 0x144c17b (BackendRun+0xbb)

#25 0x144ad85 (BackendStartup+0x525)

#26 0x14481e6 (ServerLoop+0x616)

#27 0x1443e0f (PostmasterMain+0x30cf)

#28 0x106ebf2 (main+0x5a2)

#29 0x7f2a9ff94083 (__libc_start_main+0xf3)

#30 0x49fc0e (_start+0x2e)

```

 

Message-ID: <00dd01d96e27$9a8ca9f0$cfa5fdd0$@mails.tsinghua.edu.cn>
Permalink:  ../00dd01d96e27$9a8ca9f0$cfa5fdd0$@mails.tsinghua.edu.cn/
Also on:    postgresql.org/message-id/00dd01d96e27$9a8ca9f0$cfa5fdd0$@mails.tsinghua.edu.cn

copy link · copy postgr.es

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-bugs@postgresql.org
  Cc: fjz22@mails.tsinghua.edu.cn, pgsql-bugs@lists.postgresql.org, ljiee@mail.tsinghua.edu.cn, wuzy21@mails.tsinghua.edu.cn
  Subject: Re:  9. PostgreSQL Server 15.2 Subprocess Went down at function 'expanded_record_set_fields'
  In-Reply-To: <00dd01d96e27$9a8ca9f0$cfa5fdd0$@mails.tsinghua.edu.cn>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox