• Tom Lane's avatar
    Fix bogus tuple-slot management in logical replication UPDATE handling. · 4d9ceb00
    Tom Lane authored
    slot_modify_cstrings seriously abused the TupleTableSlot API by relying
    on a slot's underlying data to stay valid across ExecClearTuple.  Since
    this abuse was also quite undocumented, it's little surprise that the
    case got broken during the v12 slot rewrites.  As reported in bug #16129
    from Ondřej Jirman, this could lead to crashes or data corruption when
    a logical replication subscriber processes a row update.  Problems would
    only arise if the subscriber's table contained columns of pass-by-ref
    types that were not being copied from the publisher.
    
    Fix by explicitly copying the datum/isnull arrays from the source slot
    that the old row was in already.  This ends up being about the same
    thing that happened pre-v12, but hopefully in a less opaque and
    fragile way.
    
    We might've caught the problem sooner if there were any test cases
    dealing with updates involving non-replicated or dropped columns.
    Now there are.
    
    Back-patch to v10 where this code came in.  Even though the failure
    does not manifest before v12, IMO this code is too fragile to leave
    as-is.  In any case we certainly want the additional test coverage.
    
    Patch by me; thanks to Tomas Vondra for initial investigation.
    
    Discussion: https://postgr.es/m/16129-a0c0f48e71741e5f@postgresql.org
    4d9ceb00
001_rep_changes.pl 11.7 KB