BUG #19055: Server crash at ExecInterpExpr

PG Bug reporting form <noreply@postgresql.org>

From: PG Bug reporting form <noreply@postgresql.org>

To: pgsql-bugs@lists.postgresql.org

Cc: dllggyx@outlook.com

Date: 2025-09-17T14:34:23Z

Lists: pgsql-bugs

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Calculate agglevelsup correctly when Aggref contains a CTE.
- e830896c16ee 17.7 landed
- b649ef2446a4 13.23 landed
- b0cc0a71e0a0 19 (unreleased) landed
- afd18f27615b 15.15 landed
- 7df74e635e65 16.11 landed
- 4eab456494e3 18.0 landed
- 31bf0963208f 14.20 landed

The following bug has been logged on the website:

Bug reference:      19055
Logged by:          BugForge
Email address:      dllggyx@outlook.com
PostgreSQL version: 17.6
Operating system:   Ubuntu 20.04 x86-64, docker image postgres:17.6
Description:        

PoC:
SELECT FROM ( SELECT generate_series ( 1 , '31' ) x ) GROUP BY ( x ) WINDOW
w AS ( ORDER BY ( WITH x AS ( WITH x AS ( SELECT sum ( x ) ) SELECT DISTINCT
* FROM x ) ( SELECT ( count ( ( SELECT x FROM x ) ) ) ) ) )

docker log:
#0 0xbd810a (ExecInterpExpr+0x142a)
#1 0xce2c89 (ExecSubPlan+0x889)
#2 0xbdb3d6 (ExecInterpExpr+0x46f6)
#3 0xc4f44e (ExecAgg+0x114e)
#4 0xce1372 (ExecSort+0x8e2)
#5 0xd0739e (begin_partition+0x3fe)
#6 0xcf71f6 (ExecWindowAgg+0xbb6)
#7 0xc016ac (standard_ExecutorRun+0x59c)
#8 0x133404d (PortalRunSelect+0x2dd)
#9 0x133321d (PortalRun+0x51d)
#10 0x132f1de (exec_simple_query+0x146e)
#11 0x1328627 (PostgresMain+0x2c57)
#12 0x13192e4 (BackendMain+0xe4)
#13 0x10a26c3 (postmaster_child_launch+0x193)
#14 0x10adb91 (ServerLoop+0x4821)
#15 0x10a76ec (PostmasterMain+0x241c)
#16 0xd5c2b8 (main+0x458)
#17 0x7592b5dde083 (__libc_start_main+0xf3)
#18 0x4a9c6e (_start+0x2e)