pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  
help / color / mirror / Atom feed
From: Bryan Green <dbryan.green@gmail.com>
To: Haibo Yan <tristan.yim@gmail.com>
To: SCHOEMANS Maxime <maxime.schoemans@ulb.be>
Cc: vignesh C <vignesh21@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Damir Belyalov <dam.bel07@gmail.com>
Cc: jian he <jian.universality@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Cc: SAKR Mahmoud <mahmoud.sakr@ulb.be>
Cc: Diogo Repas <diogo.repas@gmail.com>
Subject: Re: Implement missing join selectivity estimation for range types
Date: Fri, 18 Sep 2026 15:18:21 -0500
Message-ID: <6929b807-32e9-4e80-b3d3-1f7823880d60@gmail.com> (raw)
In-Reply-To: <CABXr29HyNDjVYza0op20aKt1mdtdzbxMLvzCKdtMu45_TH4NGw@mail.gmail.com>
References: <CAB4o4asMq3k6HN9WfDsssQ5DDVfAziB4TpiFJ8RBJgZTVuwC7g@mail.gmail.com>
	<CACJufxFhES7untAPmxJDrB-y_pNgah_1HNbXjcOj6g=yxh3kdA@mail.gmail.com>
	<CABXr29HUT2m7YPpB4gOZHphYmwpwuEWFZ_p6oeyouhWw8Zc1Tw@mail.gmail.com>
	<DB8P190MB0731FF1A358E9AB16FB1F14FF0252@DB8P190MB0731.EURP190.PROD.OUTLOOK.COM>
	<CABXr29Gts+FuMRkeA=JNAxB700W1EQW2F=W2wAjtJrGZDGTxGw@mail.gmail.com>
	<DB8P190MB0731EA1B8381F48AA15B9437F0222@DB8P190MB0731.EURP190.PROD.OUTLOOK.COM>
	<CABXr29HuYbrtrThYaE8GYy-wMxtej8sG4Hw+2oSfQvuM+c0XVw@mail.gmail.com>
	<AM0P190MB07243E890A7DFD6F24F70269F0232@AM0P190MB0724.EURP190.PROD.OUTLOOK.COM>
	<CABXr29HNiiDo9nU-iOgLgWjg_MS=ZheSaq+Waf2i5FDy4GL1rg@mail.gmail.com>
	<DB8P190MB073174810A391519D4B0BD5BF02C2@DB8P190MB0731.EURP190.PROD.OUTLOOK.COM>
	<CABXr29Edby6Cbbaps_OQh-+kvKx+XFNe26jc=sBxWhjaYO9raQ@mail.gmail.com>
	<DB8P190MB073193B8E609885E3B11E73CF02A2@DB8P190MB0731.EURP190.PROD.OUTLOOK.COM>
	<CABXr29HyNDjVYza0op20aKt1mdtdzbxMLvzCKdtMu45_TH4NGw@mail.gmail.com>

On 4/24/2026 1:44 PM, Haibo Yan wrote:
> On Thu, Apr 23, 2026 at 5:32 AM SCHOEMANS Maxime <maxime.schoemans@ulb.be>
> wrote:
> 
>> Hi Haibo,
>>
>> Thanks for creating the CommitFest entry. Could you add Diogo Repas,
>> Zhicheng Luo, and Mahmoud Sakr as authors as well? They wrote the
>> original patch and the underlying algorithm. The earlier CF entry is
>> at https://commitfest.postgresql.org/patch/3821/ for reference.
>>
>> Of course — I’ve added Diogo Repas, Zhicheng Luo, and Mahmoud Sakr as
> authors as we
> 
>> Regards,
>> Maxime
>>
> Thanks for the reference.
> 
> Best regards,
> Haibo


One thing that might be a problem is that rangejoinsel and
multirangejoinsel (0002) look like they use the bounds histogram without
the statistic_proc_security_check() that calc_hist_selectivity does just
above. If I follow it correctly, that runs the cmp/subdiff over another
role's histogram at plan time, before the permission check, which I
believe is what CVE-2017-7484 guarded against.


-- 
Bryan Green
EDB: https://www.enterprisedb.com






view thread (32+ messages)  latest in thread

Message-ID: <6929b807-32e9-4e80-b3d3-1f7823880d60@gmail.com>
Permalink:  ../6929b807-32e9-4e80-b3d3-1f7823880d60@gmail.com/
Also on:    postgresql.org/message-id/6929b807-32e9-4e80-b3d3-1f7823880d60@gmail.com

 · 

reply

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: dbryan.green@gmail.com, tristan.yim@gmail.com, maxime.schoemans@ulb.be, vignesh21@gmail.com, tgl@sss.pgh.pa.us, dam.bel07@gmail.com, jian.universality@gmail.com, pgsql-hackers@lists.postgresql.org, mahmoud.sakr@ulb.be, diogo.repas@gmail.com
  Subject: Re: Implement missing join selectivity estimation for range types
  In-Reply-To: <6929b807-32e9-4e80-b3d3-1f7823880d60@gmail.com>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox