Re: BUG #19476: Segmentation fault in contrib/spi

Nathan Bossart <nathandbossart@gmail.com>

From: Nathan Bossart <nathandbossart@gmail.com>
To: Ayush Tiwari <ayushtiwari.slg01@gmail.com>
Cc: pierre.forstmann@gmail.com, pgsql-bugs@lists.postgresql.org
Date: 2026-05-14T16:45:46Z
Lists: pgsql-bugs

Attachments

On Thu, May 14, 2026 at 11:01:55AM -0500, Nathan Bossart wrote:
> Regarding 0001, note that the refint docs state the following:
> 
>     Note that the primary/unique key columns should be marked NOT NULL and
>     should have a unique index.
> 
> So maybe we could alternatively teach check_foreign_key() to either ERROR
> or do nothing instead.  On the other hand, given this case seemed to
> accidentally work before the CVE fix, it's arguably worth fixing.

Here is what I have staged for commit, which I intend to do shortly.

-- 
nathan

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →
  1. refint: Fix segfault in check_foreign_key().

  2. refint: Fix SQL injection and buffer overruns.