The following bug has been logged on the website:
Bug reference: 15518
Logged by: Andrew Gierth
Email address: andrew@tao11.riddles.org.uk
PostgreSQL version: 11.1
Operating system: any
Description:
Based on a report from IRC:
create extension intarray;
create table ibreak (id integer, a integer[]);
create index on ibreak using gist (a);
insert into ibreak
select i, array(select hashint4(i*j) from generate_series(1,100) j)
from generate_series(1,20) i;
-- segfault
This happens because the default "small" intarray opclass, gist__int_ops,
has wholly inadequate sanity checks on the data; while it will reject
individual rows with too many distinct values, it will happily construct
compressed non-leaf keys that will crash the decompression code due to
overflowing an "int", or produce an unhelpful memory allocation error, or
consume vast amounts of CPU time without checking for interrupts.
This isn't new; it looks like this issue has existed as long as intarray
has.
Obviously it's not intended that gist__int_ops should actually work with
data of this kind - that's what gist__intbig_ops is for. But it's not
reasonable for it to crash rather than returning an error.
I'm working on a patch.
