Skip to content

Commit 420d9ec

Browse files
committed
Avoid dangling pointer to relation name in RLS code path in DoCopy().
With RLS active, "COPY tab TO ..." failed under -DRELCACHE_FORCE_RELEASE, and would sometimes fail without that, because it used the relation name directly from the relcache as part of the parsetree it's building. That becomes a potentially-dangling pointer as soon as the relcache entry is closed, a bit further down. Typical symptom if the relcache entry chanced to get cleared would be "relation does not exist" error with a garbage relation name, or possibly a core dump; but if you were really truly unlucky, the COPY might copy from the wrong table. Per report from Andrew Dunstan that regression tests fail with -DRELCACHE_FORCE_RELEASE. The core tests now pass for me (but have not tried "make check-world" yet). Discussion: https://postgr.es/m/7b52f900-0579-cda9-ae2e-de5da17090e6@2ndQuadrant.com
1 parent 807df31 commit 420d9ec

File tree

1 file changed

+2
-1
lines changed

1 file changed

+2
-1
lines changed

src/backend/commands/copy.c

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -940,7 +940,8 @@ DoCopy(const CopyStmt *stmt, const char *queryString, uint64 *processed)
940940
* relation which we have opened and locked.
941941
*/
942942
from = makeRangeVar(get_namespace_name(RelationGetNamespace(rel)),
943-
RelationGetRelationName(rel), -1);
943+
pstrdup(RelationGetRelationName(rel)),
944+
-1);
944945

945946
/* Build query */
946947
select = makeNode(SelectStmt);

0 commit comments

Comments
 (0)