Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tJ0xA-000Sjb-77 for pgsql-hackers@arkaria.postgresql.org; Thu, 05 Dec 2024 01:46:52 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1tJ0x7-003orP-H3 for pgsql-hackers@arkaria.postgresql.org; Thu, 05 Dec 2024 01:46:50 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1tJ0x7-003orH-4h for pgsql-hackers@lists.postgresql.org; Thu, 05 Dec 2024 01:46:50 +0000 Received: from mail-lf1-x142.google.com ([2a00:1450:4864:20::142]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1tJ0x4-0016hc-CG for pgsql-hackers@lists.postgresql.org; Thu, 05 Dec 2024 01:46:49 +0000 Received: by mail-lf1-x142.google.com with SMTP id 2adb3069b0e04-53df1d1b726so421436e87.0 for ; Wed, 04 Dec 2024 17:46:46 -0800 (PST) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20230601; t=1733363206; x=1733968006; darn=lists.postgresql.org; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:from:to:cc:subject:date :message-id:reply-to; bh=fPzQsyTf4TqJbCSpH+IdjBVVBEYx/0qLR1DQRjfDQFs=; b=h5lQVUgKN8tu3oHK9wahK64KSfL/yx5lvbAVw69WMng70su8byWT5hlJHrwqZXsuW1 IeVZnf0geftfgQW57yGqLuUjZjppN1ztMPimUjt5tEpCzoDel7wqwsBjq7CR/N33r+Z2 8+9pMtuIY1T3oorZQL6CjmBm5g6/TtHhvw1tsXD6hbyJWyEoZjokhdsPW01uP1Vww9sB FgtIWytFkipQ9DX6JHtRj3MkUImirnL2u0faTDe08B/mY6Ct1LTF0Ls8l36kIL0Dd970 rIG4g3RrfJS9ESCBlEsxuerRT6ci9M+y5T4VkLA7L5Ot55GPhZZRC4i+LnXdPFtQCcBl KwGg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1733363206; x=1733968006; h=content-transfer-encoding:cc:to:subject:message-id:date:from :in-reply-to:references:mime-version:x-gm-message-state:from:to:cc :subject:date:message-id:reply-to; bh=fPzQsyTf4TqJbCSpH+IdjBVVBEYx/0qLR1DQRjfDQFs=; b=KKk2OwAHkTXmVbz1vZR2vgYwcXTKXq8g4XwTsuJnIa9b8iJjlsiAobZ6PpXEX8kc1b MJKdNLESVMsqHHQMRP+paNu0fDTl1eHs/wWreTm7+uF8CyVxwkp89QoAuFOMy5CXXK0R nauVYXzByWPE2ndI2iwQyDzWwNLMI2vq/tUxus7lbnDMYrlMGQMWMcDg6MFIs15e6Rvn lVviGQ5QcXyJtOWJ0j5znLpeYDao2EJ8T+FaGlVbKCeztcjWGEoT8kJk6cxqEwhrIjaH 2S5aZm4rypi+rHsLFBYqN5kIF8DAIzNy9wHQ9/lZRCokw3rPQHrpurNipiICAFQBGXoa ID6g== X-Forwarded-Encrypted: i=1; AJvYcCVSBywFSN6yzKrZKyDTO18jJ/ulyDljEpzJnvggO7ymGVZZL5mKAf0RijzkB51aRhLXw1h2AydT2nctnuC/@lists.postgresql.org X-Gm-Message-State: AOJu0YwZKUDbQHoNhqJiAw1Ogt1wd/q5uC6rbDhIGDbzcN4kIBHeVn8M u30T027799m6s5pQ6OBFunhG00nduzXIVFP8snAxWCCk5Vyae1HOOp7SvyXNXnsGUijcdEHP304 LMRNcd0hPkCIXdn+o6hWp1NzbSlc= X-Gm-Gg: ASbGncsNZ3IvVDEbB4FCFLPG2B/McYrazcpXhzh6IGRiL4jp/4EFAlh7j/IBbFJePeQ 8/lXia8tnS+rEqRvwneQYADAl6u9eKkucM4Q1EqMq/pJ/FSSH9zoKfvup3XNF2Qls X-Google-Smtp-Source: AGHT+IE/X4fv6GYFdoXY16To5km2DPePu+b4CToQKP6VoUPP32huq1K239+mYCuysDPjHmhguTAkjspX/FXSgdO1dNU= X-Received: by 2002:a05:6512:128b:b0:539:8a9a:4e63 with SMTP id 2adb3069b0e04-53e12a21812mr4166997e87.42.1733363205190; Wed, 04 Dec 2024 17:46:45 -0800 (PST) MIME-Version: 1.0 References: <1936493cc38.68cb2ef27266.7456585136086197135@zohocorp.com> In-Reply-To: From: John Naylor Date: Thu, 5 Dec 2024 08:46:33 +0700 Message-ID: Subject: Re: [Bug] Heap Use After Free in parallel_vacuum_reset_dead_items Function To: Vallimaharajan G Cc: "zlabs-cstore@zohocorp.com" , pgsql-hackers Content-Type: text/plain; charset="UTF-8" Content-Transfer-Encoding: quoted-printable List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Tue, Nov 26, 2024 at 4:53=E2=80=AFPM John Naylor wrote: > Thanks for the report! I don't see any immediate evidence of deleterious = effects, but it's still sloppy. To reduce risk going forward, I think we sh= ould always access this pointer via the struct rather than a separate copy,= quick attempt attached. [removing -bugs] I looked again and changed a few more places for consistency, and committed= . --=20 John Naylor Amazon Web Services