BUG #17831: server crash - Mailing list pgsql-bugs

From PG Bug reporting form
Subject BUG #17831: server crash
Date
Msg-id 17831-d48c0fbc0407d417@postgresql.org
Whole thread Raw
Responses Re: BUG #17831: server crash  (Tom Lane <tgl@sss.pgh.pa.us>)
List pgsql-bugs
The following bug has been logged on the website:

Bug reference:      17831
Logged by:          Zhiyong Wu
Email address:      253540651@qq.com
PostgreSQL version: 15.2
Operating system:   Linux
Description:

PoC:
select
  pg_catalog.int8multirange() as c0, 
  pg_catalog.pg_export_snapshot() as c1, 
  ref_0.default_collate_schema as c2,
  ref_0.character_set_name as c3,
  ref_0.default_collate_catalog as c4,
  (select tablename from pg_catalog.pg_tables limit 1 offset 3)
     as c5,
  ref_0.default_collate_catalog as c6,
  ref_0.default_collate_catalog as c7,
  ref_0.character_set_name as c8,
  ref_0.default_collate_schema as c9,
  pg_catalog.pg_stat_get_bgwriter_requested_checkpoints() as c10,
  ref_0.default_collate_catalog as c11,
  pg_catalog.pg_stat_get_bgwriter_stat_reset_time() as c12,
  ref_0.default_collate_schema as c13
from
  information_schema.character_sets as ref_0
where pg_catalog.pg_terminate_backend(
    cast(pg_catalog.pg_backend_pid() as int4),
    cast((select off from pg_catalog.pg_shmem_allocations limit 1 offset
3)
       as int8)) is not NULL


pgsql-bugs by date:

Previous
From: PG Bug reporting form
Date:
Subject: BUG #17830: Incorrect memory access in trgm_regexp
Next
From: Tom Lane
Date:
Subject: Re: BUG #17831: server crash