Fix pg_trgm's picksplit function with all-true datums
The CACHESIGN.sign field is a BITVECP, not a TRGM, so you should not
use GETSIGN() on it. You don't get a compiler warning because the
GETSIGN() macro includes a cast. It resulted in a bogus read beyond
end of buffer, which would cause bad split decisions or a crash if
you're very unlucky.
Reported-by: Mehmet D. INCE <mehmet@mehmetince.net>
Backpatch-through: 14
Security: CVE-2026-14678
Branch
------
REL_14_STABLE
Details
-------
https://git.postgresql.org/pg/commitdiff/a74aa0854d5e7c6c14c7d31f41bc7adc366f3ef7
Author: Heikki Linnakangas <heikki.linnakangas@iki.fi>
Modified Files
--------------
contrib/pg_trgm/trgm_gist.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
