mirror/postgresql
2
0
Fork 0
mirror of https://git.postgresql.org/git/postgresql.git synced 2025-01-12 18:34:36 +08:00
Code Issues Packages Projects Releases Wiki Activity

Fix bogus lock release in RemovePolicyById and RemoveRoleFromObjectPolicy.

Browse Source 
Can't release the AccessExclusiveLock on the target table until commit.
Otherwise there is a race condition whereby other backends might service
our cache invalidation signals before they can actually see the updated
catalog rows.

Just to add insult to injury, RemovePolicyById was closing the rel (with
incorrect lock drop) and then passing the now-dangling rel pointer to
CacheInvalidateRelcache.  Probably the reason this doesn't fall over on
CLOBBER_CACHE buildfarm members is that some outer level of the DROP logic
is still holding the rel open ... but it'd have bit us on the arse
eventually, no doubt.
This commit is contained in:
Tom Lane 2016-01-03 20:53:35 -05:00
parent c1611db01f
commit f47b602df8
1 changed files with 10 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
src/backend/commands/policy.c
View File

@ -370,7 +370,10 @@ RemovePolicyById(Oid policy_id)
elog(ERROR, "could not find tuple for policy %u", policy_id); elog(ERROR, "could not find tuple for policy %u", policy_id);
/* /*
* Open and exclusive-lock the relation the policy belong to. * Open and exclusive-lock the relation the policy belongs to. (We need
* exclusive lock to lock out queries that might otherwise depend on the
* set of policies the rel has; furthermore we've got to hold the lock
* till commit.)
*/ */
relid = ((Form_pg_policy) GETSTRUCT(tuple))->polrelid; relid = ((Form_pg_policy) GETSTRUCT(tuple))->polrelid;
@ -390,7 +393,6 @@ RemovePolicyById(Oid policy_id)
simple_heap_delete(pg_policy_rel, &tuple->t_self); simple_heap_delete(pg_policy_rel, &tuple->t_self);
systable_endscan(sscan); systable_endscan(sscan);
heap_close(rel, AccessExclusiveLock);
/* /*
* Note that, unlike some of the other flags in pg_class, relrowsecurity * Note that, unlike some of the other flags in pg_class, relrowsecurity
@ -400,9 +402,10 @@ RemovePolicyById(Oid policy_id)
* policy is created and all records are filtered (except for queries from * policy is created and all records are filtered (except for queries from
* the owner). * the owner).
*/ */
CacheInvalidateRelcache(rel); CacheInvalidateRelcache(rel);
heap_close(rel, NoLock);
/* Clean up */ /* Clean up */
heap_close(pg_policy_rel, RowExclusiveLock); heap_close(pg_policy_rel, RowExclusiveLock);
} }
@ -657,7 +660,9 @@ RemoveRoleFromObjectPolicy(Oid roleid, Oid classid, Oid policy_id)
/* Clean up. */ /* Clean up. */
systable_endscan(sscan); systable_endscan(sscan);
relation_close(rel, AccessExclusiveLock);
relation_close(rel, NoLock);
heap_close(pg_policy_rel, RowExclusiveLock); heap_close(pg_policy_rel, RowExclusiveLock);
return(noperm || num_roles > 0); return(noperm || num_roles > 0);
@ -734,7 +739,7 @@ CreatePolicy(CreatePolicyStmt *stmt)
RangeVarCallbackForPolicy, RangeVarCallbackForPolicy,
(void *) stmt); (void *) stmt);
/* Open target_table to build quals. No lock is necessary. */ /* Open target_table to build quals. No additional lock is necessary. */
target_table = relation_open(table_id, NoLock); target_table = relation_open(table_id, NoLock);
/* Add for the regular security quals */ /* Add for the regular security quals */