Fix use-after-free around DISTINCT transition function calls.

Heikki Linnakangas <heikki.linnakangas@iki.fi>

Commit: a5f0bd77a2fab60a52dc335a63efc21abc806aa7
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
Date: 2016-10-17T09:13:35Z
Releases: 9.6.1
Fix use-after-free around DISTINCT transition function calls.

Have tuplesort_gettupleslot() copy the contents of its current table slot
as needed. This is based on an approach taken by tuplestore_gettupleslot().
In the future, tuplesort_gettupleslot() may also be taught to avoid copying
the tuple where caller can determine that that is safe (the
tuplestore_gettupleslot() interface already offers this option to callers).

Patch by Peter Geoghegan. Fixes bug #14344, reported by Regina Obe.

Report: <20160929035538.20224.39628@wrigleys.postgresql.org>

Backpatch-through: 9.6

Files

PathChange+/−
src/backend/utils/sort/tuplesort.c modified +9 −0