public inbox for [email protected]  

help / color / mirror / Atom feed

From: Dmitry Dolgov <[email protected]>
To: [email protected]
To: [email protected]
Subject: Re: BUG #19433: json_object_agg_unique Crashes When Used as Window Function
Date: Fri, 13 Mar 2026 11:41:05 +0100
Message-ID: <s6pzvce3crwjonox4bhzvpra5ifxpvgcopxjwu74e22ns3o3c6@4p7iua2m746b> (raw)
In-Reply-To: <[email protected]>
References: <[email protected]>

> On Fri, Mar 13, 2026 at 03:14:26AM +0000, PG Bug reporting form wrote:
> The following bug has been logged on the website:
> 
> Bug reference:      19433
> Logged by:          chunling qin
> Email address:      [email protected]
> PostgreSQL version: 15.0
> Operating system:   centos
> Description:        
> 
> ## Summary
> 
> `json_object_agg_unique()` causes a segmentation fault when used as a window
> function with `ORDER BY` clause. The crash occurs due to a use-after-free
> bug where the internal hash table pointer is accessed after being freed.
> 
> ---
> 
> ## Environment
> 
> | Item | Value |
> |------|-------|
> | PostgreSQL Version | 15devel (development build) |
> | Commit | 7103ebb7aa |
> | Platform | x86_64-pc-linux-gnu |
> | Test Date | 2026-03-13 |

I think the problem you describe was fixed in 4eb97988796, which became
part of REL_15_RC1.

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: [email protected]
  Cc: [email protected], [email protected], [email protected]
  Subject: Re: BUG #19433: json_object_agg_unique Crashes When Used as Window Function
  In-Reply-To: <s6pzvce3crwjonox4bhzvpra5ifxpvgcopxjwu74e22ns3o3c6@4p7iua2m746b>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by agora; see mirroring instructions
for how to clone and mirror all data and code used for this inbox