Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1w0zxD-002Ovb-31 for pgsql-bugs@arkaria.postgresql.org; Fri, 13 Mar 2026 10:41:15 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1w0zxB-003C0m-1H for pgsql-bugs@arkaria.postgresql.org; Fri, 13 Mar 2026 10:41:13 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from <9erthalion6@gmail.com>) id 1w0zxB-003C0d-02 for pgsql-bugs@lists.postgresql.org; Fri, 13 Mar 2026 10:41:13 +0000 Received: from mail-ed1-x534.google.com ([2a00:1450:4864:20::534]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from <9erthalion6@gmail.com>) id 1w0zx8-00000001vKc-2tCF for pgsql-bugs@lists.postgresql.org; Fri, 13 Mar 2026 10:41:12 +0000 Received: by mail-ed1-x534.google.com with SMTP id 4fb4d7f45d1cf-65c4152313fso2842093a12.1 for ; Fri, 13 Mar 2026 03:41:10 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1773398468; x=1774003268; darn=lists.postgresql.org; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:to:from:date:from:to:cc:subject:date:message-id:reply-to; bh=BdG+zZVa7zV1C6OiugKqhgW0SzNa2cPJSzzDgx2xfdo=; b=CR1NnBcSce7EfD6opymiMcES7MioczDTdzPRVS5omJo8agULfCP+pabiPF9McxUVqi xBXUoavym+A0LZsmgcbERXtwxtLVuCY/BrR3Q5py27bwx9c1V5aVjONpZ0G1kjg2+eRL I04sRSCFx00ZfEzXcb4yDuyr4AvtscXQVkduWfd1rjpGYP2jt2HcsBPi6yoz5d9OSIBr ZBsmU8VsZi406BE9ydxXOSg0tNLxqe9BIqfPWWK40bVyNFkRDqnCtvms9baKL/s4ltpM DtNzadcf5g5OklakUoa9paoULAiO/dmUWSiSpwRaAmnY+W5ym+WXLqIoUnY8ESeyg99I XN8w== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1773398468; x=1774003268; h=in-reply-to:content-disposition:mime-version:references:message-id :subject:to:from:date:x-gm-gg:x-gm-message-state:from:to:cc:subject :date:message-id:reply-to; bh=BdG+zZVa7zV1C6OiugKqhgW0SzNa2cPJSzzDgx2xfdo=; b=eE2ceMpw5g9dER1+Z18yV74YGc+bWuXHMfp1KsrsuhbI+43u+mfmDxtEYFcW6G/rGX oj2R03lx5I34HNfWI91l84iWG6ZZpxTDM6E2t9/yP1Dar6l5/MM/fysdQF1wid5w2mUV BbtgI7MQ0f6zuuZ9KIK7rBM3Cqtl0P9CrvZT4YtzKJWX2eqAtsoW3Dv1PE7pTJm5ornH i+1tKY21N40RFKTgsEsQNmTKTVvogCHfQWOdLpk1zRKKYrYlMOjquWKBK1uCYIvhOvOf fPF2ueSkLqz4pCSMPCwhe25PqTxiKDNCQ16ErxHDBngJNBYvF4/l10t1jUCeSYcKp1Ac P3HQ== X-Forwarded-Encrypted: i=1; AJvYcCU/jbHdHmwJ7je6QFRt3HoIs+81ndRKi710e9NzI77X/wKPc+MfAhy2QMXTmC3C9TaHRcIpCRHQR3Pu@lists.postgresql.org X-Gm-Message-State: AOJu0YyBc9ABD5JIMRgSc6yHWpcwm0BLsUEBpV8hi6oz5mGxGhzXlkgh 4a+SU7ndYtI3q/t+yTbQgAnMgb4eDSMdQ+U3W0iLXztadiw9nMgqGT5euEPMJg== X-Gm-Gg: ATEYQzxiRenYhuBACIF68t0n6NhF4Vw0rTgWvwSbteBWW032dOHkB0D6F2/aXkzvgRv KWGiSvpbGeF2l0n4va37dp5fyfbEJlmETs9I8/nFEVna5Grsu/lU3njFBWzb9mrzcQIZ3atR3sW Msxnd/+p/alXZllT+Ni0bwtyOhEzz4M9T1UtYuj86gS5hWTgoheVpIfkUoIQH03OsmRzQ6dVtn3 pX7iY7mDJaFpVmfKL1vx0PUcUBDRUVU0pfjIcYjrnfwbSbOmiAnILLq1zWpBMBn0DOJEGfs89ir 00bfsvHa89TEQkxZe9iIqhP4IuE8H+OHNCG8wLbgtM/TPXQmDRdeYx+wtf2zuAJSCMrRM6/3ebm BqD2I8FQGIJljb5Yrw8hw0JWPU8/3ibF0Yr2ty13N0ZsD67nCXIVA9yyWgtFCYYTkv/efejrKFI bZRvG5vQwDS2TR6MaSQGcsfPpQJUvayIg3UqeOm0pNkr/t5tqtWpVQH9wfg+mkKS7DOlkdjpHV6 AtzvjkC62aFTWy1v6ZkAIN6MppTsuXpeTqH X-Received: by 2002:a17:907:682:b0:b91:949a:721 with SMTP id a640c23a62f3a-b97653a8a1fmr109123066b.50.1773398467604; Fri, 13 Mar 2026 03:41:07 -0700 (PDT) Received: from ddolgov-thinkpadt14sgen1.rmtde.csb (dslb-002-207-075-089.002.207.pools.vodafone-ip.de. [2.207.75.89]) by smtp.gmail.com with ESMTPSA id a640c23a62f3a-b976d08e6a0sm35582366b.61.2026.03.13.03.41.06 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 13 Mar 2026 03:41:07 -0700 (PDT) Date: Fri, 13 Mar 2026 11:41:05 +0100 From: Dmitry Dolgov <9erthalion6@gmail.com> To: 303677365@qq.com, pgsql-bugs@lists.postgresql.org Subject: Re: BUG #19433: json_object_agg_unique Crashes When Used as Window Function Message-ID: References: <19433-74818a14ca269428@postgresql.org> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <19433-74818a14ca269428@postgresql.org> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk > On Fri, Mar 13, 2026 at 03:14:26AM +0000, PG Bug reporting form wrote: > The following bug has been logged on the website: > > Bug reference: 19433 > Logged by: chunling qin > Email address: 303677365@qq.com > PostgreSQL version: 15.0 > Operating system: centos > Description: > > ## Summary > > `json_object_agg_unique()` causes a segmentation fault when used as a window > function with `ORDER BY` clause. The crash occurs due to a use-after-free > bug where the internal hash table pointer is accessed after being freed. > > --- > > ## Environment > > | Item | Value | > |------|-------| > | PostgreSQL Version | 15devel (development build) | > | Commit | 7103ebb7aa | > | Platform | x86_64-pc-linux-gnu | > | Test Date | 2026-03-13 | I think the problem you describe was fixed in 4eb97988796, which became part of REL_15_RC1.