pgsql: Avoid crashing when we have problems unlinking files post-commit - Mailing list pgsql-committers

From Tom Lane
Subject pgsql: Avoid crashing when we have problems unlinking files post-commit
Date
Msg-id E1Rd5sK-00061i-KT@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Avoid crashing when we have problems unlinking files post-commit.

smgrdounlink takes care to not throw an ERROR if it fails to unlink
something, but that caution was rendered useless by commit
3396000684b41e7e9467d1abc67152b39e697035, which put an smgrexists call in
front of it; smgrexists *does* throw error if anything looks funny, such
as getting a permissions error from trying to open the file.  If that
happens post-commit, you get a PANIC, and what's worse the same logic
appears in the WAL replay code, so the database even fails to restart.

Restore the intended behavior by removing the smgrexists call --- it isn't
accomplishing anything that we can't do better by adjusting mdunlink's
ideas of whether it ought to warn about ENOENT or not.

Per report from Joseph Shraibman of unrecoverable crash after trying to
drop a table whose FSM fork had somehow gotten chmod'd to 000 permissions.
Backpatch to 8.4, where the bogus coding was introduced.

Branch
------
REL9_1_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/a63a7a5b091f8b833169476e8de18100fb1cb73d

Modified Files
--------------
src/backend/access/transam/twophase.c |    3 +--
src/backend/access/transam/xact.c     |   14 ++++----------
src/backend/catalog/storage.c         |    3 +--
src/backend/storage/smgr/md.c         |   26 ++++++++++++++------------
4 files changed, 20 insertions(+), 26 deletions(-)


pgsql-committers by date:

Previous
From: Peter Eisentraut
Date:
Subject: pgsql: Add support for privileges on types
Next
From: Tom Lane
Date:
Subject: pgsql: Avoid crashing when we have problems unlinking files post-commit