Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Subject: BUG #19427: TOAST Snapshot Assertion Failure
To: pgsql-bugs@lists.postgresql.org
From: PG Bug reporting form <noreply@postgresql.org>
Cc: 303677365@qq.com
Reply-To: 303677365@qq.com, pgsql-bugs@lists.postgresql.org
Date: Wed, 11 Mar 2026 09:21:57 +0000
Message-ID: <19427-44560ddf098e6489@postgresql.org>
Auto-Submitted: auto-generated
Archived-At: <https://www.postgresql.org/message-id/19427-44560ddf098e6489%40postgresql.org>
Precedence: bulk

The following bug has been logged on the website:

Bug reference:      19427
Logged by:          chunling qin
Email address:      303677365@qq.com
PostgreSQL version: 15.0
Operating system:   centos
Description:       =20

## Description

PostgreSQL crashes with an assertion failure when executing UPDATE
statements with RETURNING clause that returns TOAST-compressed data
(specifically `pg_node_tree` type from system catalogs). The assertion
`HaveRegisteredOrActiveSnapshot()` fails in `init_toast_snapshot()`
function.

## Crash Information

### Signal
```
SIGABRT (Assertion failure)
```

### Stack Trace
```
#0  __pthread_kill_implementation () from /lib64/libc.so.6
#1  raise () from /lib64/libc.so.6
#2  abort () from /lib64/libc.so.6
#3  ExceptionalCondition (conditionName=3D"HaveRegisteredOrActiveSnapshot()=
",
                          errorType=3D"FailedAssertion",
                          fileName=3D"toast_internals.c", lineNumber=3D670)
#4  init_toast_snapshot (toast_snapshot=3D0x7ffd01b64e50) at
toast_internals.c:670
#5  heap_fetch_toast_slice (toastrel=3D..., valueid=3D12032, attrsize=3D244=
8,
                            sliceoffset=3D0, slicelength=3D2448, result=3D.=
..)
                            at heaptoast.c:688
#6  table_relation_fetch_toast_slice (...) at tableam.h:1892
#7  toast_fetch_datum (attr=3D...) at detoast.c:375
#8  detoast_attr (attr=3D...) at detoast.c:123
#9  pg_detoast_datum_packed (datum=3D...) at fmgr.c:1757
#10 text_to_cstring (t=3D...) at varlena.c:225
#11 textout (fcinfo=3D...) at varlena.c:574
#12 pg_node_tree_out (fcinfo=3D...) at pseudotypes.c:354
#13 FunctionCall1Coll (...) at fmgr.c:1138
#14 OutputFunctionCall (...) at fmgr.c:1575
#15 printtup (...) at printtup.c:357
```

## Reproduction

### Minimal Test Case
```sql
-- Case 1: UPDATE system catalog with RETURNING TOAST column
UPDATE pg_catalog.pg_rewrite SET rulename =3D rulename
WHERE oid =3D (SELECT oid FROM pg_catalog.pg_rewrite LIMIT 1)
RETURNING ev_action;

-- Case 2: UPDATE with subquery returning TOAST data
CREATE TABLE test_table (id int, col_varchar varchar);
INSERT INTO test_table VALUES (1, 'test');

UPDATE test_table SET id =3D id
RETURN
    id,
    (SELECT ev_action FROM pg_catalog.pg_rewrite LIMIT 1) AS ev_action;
```