From: Tom Lane <tgl@sss.pgh.pa.us>
To: Alexander Lakhin <exclusion@gmail.com>
Cc: pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17950: Incorrect memory access in gtsvector_picksplit()
Date: Sun, 13 Aug 2023 10:35:43 -0400
Message-ID: <665394.1691937343@sss.pgh.pa.us> (raw)
In-Reply-To: <e2f36991-0519-bfcf-1da9-c31ca645b4ec@gmail.com>
References: <17950-6c80a8d2b94ec695@postgresql.org>
<da453149-fa9e-67fc-fbce-80cca399bce5@gmail.com>
<e2f36991-0519-bfcf-1da9-c31ca645b4ec@gmail.com>
Alexander Lakhin <exclusion@gmail.com> writes:
> I can also propose a regression test addition that demonstrates the valgrind
> complaint and also the output of gtsvectorout() for the case ISALLTRUE and
> the opposite.
OK, but ...
> This addition increases the duration of `make check -C contrib/pageinspect`
> under valgrind by 7-8 seconds for me:
[ ie, more than triple its previous runtime ]
... that seems completely unacceptable cost-wise. I'd be inclined
to commit the fix without a supporting test case, instead of that.
Given that the misapplication of GETSIGN is causing an incorrect
pointer to be passed to sizebitvec(), how come the error is not
leading to outright wrong answers? I guess because it's in
picksplit, the worst outcome normally is a poor choice of split,
so maybe exhibiting wrong behavior in a detectable way is hard.
> In absence of any objections or other propositions, I'm inclined to register
> this bugfix on the commitfest.
Please do that in any case, so we don't forget about it.
regards, tom lane
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-bugs@postgresql.org
Cc: tgl@sss.pgh.pa.us, exclusion@gmail.com, pgsql-bugs@lists.postgresql.org
Subject: Re: BUG #17950: Incorrect memory access in gtsvector_picksplit()
In-Reply-To: <665394.1691937343@sss.pgh.pa.us>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox