Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wppHO-001rsE-13 for pgsql-hackers@arkaria.postgresql.org; Fri, 31 Jul 2026 15:36:10 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.96) (envelope-from ) id 1wppHN-00GfQZ-0u for pgsql-hackers@arkaria.postgresql.org; Fri, 31 Jul 2026 15:36:09 +0000 Received: from makus.postgresql.org ([2001:4800:3e1:1::229]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.96) (envelope-from ) id 1wppHM-00Gf7G-2o for pgsql-hackers@lists.postgresql.org; Fri, 31 Jul 2026 15:36:08 +0000 Received: from mail-ot1-x332.google.com ([2607:f8b0:4864:20::332]) by makus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.98.2) (envelope-from ) id 1wppHK-00000001H8O-1w3o for pgsql-hackers@lists.postgresql.org; Fri, 31 Jul 2026 15:36:08 +0000 Received: by mail-ot1-x332.google.com with SMTP id 46e09a7af769-7eb64085c45so798586a34.2 for ; Fri, 31 Jul 2026 08:36:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1785512165; x=1786116965; darn=lists.postgresql.org; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:from:to:cc:subject:date:message-id:reply-to:content-type; bh=Lj3GSDggyuH+c4cgmCFAxp8LdAWyYS6qUH6fErymkyE=; b=srLoXOcmoce9oWXrIL1Woyt3S6U1PKANX34F+ezUWv379NooxnQ4CQq8rTkTOkED1k S2e+pZ8VaoNxvmju2TWocriaDb6aLkfmkg4Fmj2JujRb0umQUk9L3bl9RLhFdGLsoC2/ I8GNSOMyp4LTqyz9L4mksSyL18IlG/JI/bya3Lw0Pv5F8qIC+KtKpkiCu4GPrjqjRW8w FWdAgl6FAresgJu3bKuz4M6ImJo3R0jizsSmOCnsodu9emY1JsqA2Mm8hs5JJIA8R48X 7el+HsxmiVNqeQS7fnDo00DdA1AQve5R7TyYeP2Shu0o75Y1CHfk8deqgeuDVoZJXnpV NMVw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1785512165; x=1786116965; h=in-reply-to:content-transfer-encoding:content-disposition :content-type:mime-version:references:message-id:subject:cc:to:from :date:x-gm-gg:x-gm-message-state:from:to:cc:subject:date:message-id :reply-to:content-type; bh=Lj3GSDggyuH+c4cgmCFAxp8LdAWyYS6qUH6fErymkyE=; b=FkwnBG5YVFKVIAKxjwrQctxybS5+lCPvmq0Z/1+cyo48qV8TqcTpQxHQCs00y8b+dj Hhx/hLtd0MbokoyO7vbpXjbL0dB3042bvtQloqwfITigz3fGGHzzfOiphEo7siw0J84D 7fuPBSfVpzCLxHmPGIMsxxdUQ1HdpbsIRpLjXO+TmCMyKOrD0n97ArfrkVGrNdj3N+aX 7w9VmVNuej2XkJzzxg3un6w7YVRg7sPHqh3RcMwMCX2HfF+vU7u7nd25PcFAT6ZhbJ/k tbSZzTTSRM/3tOUtlYjigM0WqJThwp9kXMutOmWoIllu7xIRNs693mDWsSp8S64B/Lcx xa8A== X-Forwarded-Encrypted: i=1; AHgh+RoPRXfAph+FA+442CQc95H91Htv2sAVbbr6TxMx9MQD81aYvcpkHt0tTq8P3Zlvk7Rkr6xkumu4cZ8nKUJl@lists.postgresql.org X-Gm-Message-State: AOJu0YylxUs0ZfgZOt0X5M/xJx9lNOYL9ge/HrecBG8NuYtBHCUtqTxq 6T7mNKzCSfiD9HDQsXO1PNSWopEh1CcnuddrFqHGXOd3ZQmOWWnYoo9j X-Gm-Gg: AR+sD13s9H2mVtIZft/sgB+ldXDRvIybOaCGVK/4jigRA7CbcgMeDVDj6NCIf2x6CTZ LzYzjZo9c0J3t+Y6Ghcj2Lk2OKQnKceAlFI8uwJ6CZO4Xs/aRNTBYrslC2e806sErMoLfcbBtBq Wr+r87wOL0/MNekwvHq8ptorTG393DZyeKHC6cqYLoq5CvSvG3ccrvb/1YBPhufVA0vifXAFcmF 7q0JhQyvb9slHfJArEIh6oDuXNtAH9dEYa6HOPLDsG+Mvp0zGK5GMKTUsEiYaU1F5YxDoTeAish ta0kA4ow67Ex5JIsgsfB5UG3OOuG85M5plQjVB/NuSWqEXLtOnOAYfWr3uoBswlr2BU5bFlTMUo fVkfMvqSR5ykM6iZdpavK7Vy4ZOyI9uocGIiKWKMsjIz7unwSwHFocrDjHYnZfDCczGtnBsLl3l b/NviR7SdsB5dS7LWRJq12TFCAOAFn4eeGo+Wq9mng4eUGUNKlvPYTYpegVCKig6RCT9ZWqq2tv 3VO60rS4Jm+eYfHyInfQjOaruR8RH4b44zbSLd+cVwsaCKM/NhnY0wDeNE= X-Received: by 2002:a05:6830:398d:b0:7dc:c7aa:22c7 with SMTP id 46e09a7af769-7f19691e7ebmr606732a34.0.1785512164779; Fri, 31 Jul 2026 08:36:04 -0700 (PDT) Received: from nathan (162-195-168-172.lightspeed.stlsmo.sbcglobal.net. [162.195.168.172]) by smtp.gmail.com with ESMTPSA id 46e09a7af769-7f18ee9a7a0sm863025a34.11.2026.07.31.08.36.03 (version=TLS1_3 cipher=TLS_AES_256_GCM_SHA384 bits=256/256); Fri, 31 Jul 2026 08:36:04 -0700 (PDT) Date: Fri, 31 Jul 2026 10:36:02 -0500 From: Nathan Bossart To: =?utf-8?B?0KXQsNC80LjQtNGD0LvQu9C40L0g0KDRg9GB0YLQsNC8?= Cc: Mats Kindahl , Andres Freund , Tom Lane , Thomas Munro , Heikki Linnakangas , pgsql-hackers@lists.postgresql.org Subject: Re: glibc qsort() vulnerability Message-ID: References: <20240212230423.GA3519@nathanxps13> <20240212234134.ilwrxvwyza3vvps7@awork3.anarazel.de> <20240213181044.GA13935@nathanxps13> <20240215233219.GA1204090@nathanxps13> <20240216200951.GA1511686@nathanxps13> <5c5a7984-b149-b505-7ad9-2a7766c65b55@postgrespro.ru> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Disposition: inline Content-Transfer-Encoding: 8bit In-Reply-To: List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On Fri, Jul 24, 2026 at 04:01:13PM -0400, Nathan Bossart wrote: > On Fri, Jul 24, 2026 at 06:12:03PM +0300, Хамидуллин Рустам wrote: >> It breaks the database vacuuming order. The order should clearly be different here.  >> This bug was introduced in PostgreSQL 17. I have attached а fix.  > > Oops, I think you're right. Thanks for reporting. I'll plan on committing > this sometime next week. Committed. -- nathan