Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: quoted-printable
Subject: BUG #19476: Segmentation fault in contrib/spi
To: pgsql-bugs@lists.postgresql.org
From: PG Bug reporting form <noreply@postgresql.org>
Cc: n.kalinin@postgrespro.ru
Reply-To: n.kalinin@postgrespro.ru, pgsql-bugs@lists.postgresql.org
Date: Tue, 12 May 2026 14:23:39 +0000
Message-ID: <19476-bd04ea6241345303@postgresql.org>
Auto-Submitted: auto-generated
Archived-At: 
 <https://www.postgresql.org/message-id/19476-bd04ea6241345303%40postgresql.org>
Precedence: bulk

The following bug has been logged on the website:

Bug reference:      19476
Logged by:          Nikita Kalinin
Email address:      n.kalinin@postgrespro.ru
PostgreSQL version: 18.3
Operating system:   Debian 13
Description:       =20

If this script is executed on the REL_18_STABLE branch, PostgreSQL crashes
with a segmentation fault:

CREATE EXTENSION refint;
CREATE TABLE c (id int4);
CREATE UNIQUE INDEX ci ON c(id);
CREATE TABLE b (refb int4);
CREATE INDEX bi ON b(refb);

CREATE TRIGGER at AFTER DELETE OR UPDATE ON c FOR EACH ROW
EXECUTE FUNCTION check_foreign_key (1, 'cascade', 'id', 'b', 'refb');

CREATE TRIGGER bt AFTER INSERT OR UPDATE ON b FOR EACH ROW
EXECUTE FUNCTION check_primary_key ('refb', 'c', 'id');

INSERT INTO c VALUES (10);
INSERT INTO b VALUES (10);
UPDATE c SET id =3D NULL WHERE id =3D 10;

Backtrace:
#0  __strlen_avx2 () at ../sysdeps/x86_64/multiarch/strlen-avx2.S:76
#1  0x0000563a92ca096e in quote_literal_cstr (rawstr=3D0x0) at quote.c:109
#2  0x00007fa4a7cce5f8 in check_foreign_key (fcinfo=3D<optimized out>) at
refint.c:489
#3  0x0000563a929c1d52 in ExecCallTriggerFunc
(trigdata=3Dtrigdata@entry=3D0x7fff8cae1100,
    tgindx=3Dtgindx@entry=3D0, finfo=3Dfinfo@entry=3D0x563aa5ae4438,
instr=3Dinstr@entry=3D0x0,
    per_tuple_context=3Dper_tuple_context@entry=3D0x563aa5adb9c0) at
trigger.c:2369
#4  0x0000563a929c4110 in AfterTriggerExecute (estate=3D<optimized out>,
event=3D0x563aa5aedbb0,
    relInfo=3D0x563aa5ae4068, src_relInfo=3D<optimized out>,
dst_relInfo=3D<optimized out>,
    trigdesc=3D0x563aa5ae4278, finfo=3D0x563aa5ae4438, instr=3D0x0,
    per_tuple_context=3D<optimized out>, trig_tuple_slot1=3D0x0,
trig_tuple_slot2=3D0x0)
    at trigger.c:4559
#5  afterTriggerInvokeEvents (events=3Devents@entry=3D0x563aa5a75050,
firing_id=3D1,
    estate=3Destate@entry=3D0x563aa5ae3b20, delete_ok=3Ddelete_ok@entry=3Df=
alse) at
trigger.c:4800
#6  0x0000563a929c8e88 in AfterTriggerEndQuery
(estate=3Destate@entry=3D0x563aa5ae3b20)
    at trigger.c:5182
#7  0x0000563a929ed504 in standard_ExecutorFinish (queryDesc=3D0x563aa5996e=
20)
at execMain.c:443
#8  0x0000563a92bd96f8 in ProcessQuery (plan=3D0x563aa5af4168,
    sourceText=3D0x563aa59df7e0 "UPDATE c SET id =3D NULL WHERE id =3D 10;",
params=3D0x0,
    queryEnv=3D0x0, dest=3D0x563aa5aeae28, qc=3D0x7fff8cae1460) at pquery.c=
:194
#9  0x0000563a92bda41e in PortalRunMulti
(portal=3Dportal@entry=3D0x563aa5a60510,
    isTopLevel=3DisTopLevel@entry=3Dtrue,
setHoldSnapshot=3DsetHoldSnapshot@entry=3Dfalse,
--Type <RET> for more, q to quit, c to continue without paging--c
    dest=3Ddest@entry=3D0x563aa5aeae28, altdest=3Daltdest@entry=3D0x563aa5a=
eae28,
    qc=3Dqc@entry=3D0x7fff8cae1460) at pquery.c:1272
#10 0x0000563a92bda7f7 in PortalRun (portal=3Dportal@entry=3D0x563aa5a60510,
    count=3Dcount@entry=3D9223372036854775807, isTopLevel=3DisTopLevel@entr=
y=3Dtrue,
    dest=3Ddest@entry=3D0x563aa5aeae28, altdest=3Daltdest@entry=3D0x563aa5a=
eae28,
    qc=3Dqc@entry=3D0x7fff8cae1460) at pquery.c:788
#11 0x0000563a92bd63fa in exec_simple_query (
    query_string=3D0x563aa59df7e0 "UPDATE c SET id =3D NULL WHERE id =3D 10=
;") at
postgres.c:1274
#12 0x0000563a92bd7fc5 in PostgresMain (dbname=3D<optimized out>,
username=3D<optimized out>)
    at postgres.c:4770
#13 0x0000563a92bd23bd in BackendMain (startup_data=3D<optimized out>,
    startup_data_len=3D<optimized out>) at backend_startup.c:124
#14 0x0000563a92b24932 in postmaster_child_launch (child_type=3D<optimized
out>, child_slot=3D1,
    startup_data=3Dstartup_data@entry=3D0x7fff8cae1900,
    startup_data_len=3Dstartup_data_len@entry=3D24,
client_sock=3Dclient_sock@entry=3D0x7fff8cae1920)
    at launch_backend.c:290
#15 0x0000563a92b283d2 in BackendStartup (client_sock=3D0x7fff8cae1920) at
postmaster.c:3569
#16 ServerLoop () at postmaster.c:1703
#17 0x0000563a92b29ea6 in PostmasterMain (argc=3Dargc@entry=3D3,
argv=3Dargv@entry=3D0x563aa5985bf0)
    at postmaster.c:1401
#18 0x0000563a92800a5a in main (argc=3D3, argv=3D0x563aa5985bf0) at main.c:=
227