Issue Information
| Issue Number | 701053c |
| Issue | A use-after-free (UAF) occurs when accessing memory areas released during the process of cleaning up buffer cache removed bh. Depending on timing, an Internal Error may occur. |
| Cause | After cleaning the SO for the removed bh, the buffer handle SO must be cleaned, but the order of SO cleanup may be reversed. |
| Solutions | When an error occurs for some reason during CR build, the process was modified to immediately clean up the CR bh while holding the buffer cache hash bucket lock after releasing the buffer pin. Even if the buffer pin is released, as long as the bucket lock is not released, the target bh will not be reused by another session, so the process from buffer pin release to CR bh cleanup can be performed atomically. |
| Occurrence Date | August 3, 2026 |
| Versions Requiring Patch | 6FS07PS 7FS02PS |
Patch Information
| Patch Name | FS02PS_701053c |
| Major Version | 7 |
| Minor Version | FS02PS |
| Version Title | Issue Resolution for Breaking Buffer Cache Hash Bucket Chain |
| Release Date | August 6, 2026 |
| Compatibility | • TAC rolling patch: Supported • TSC rolling patch: Supported • Backup data compatibility: Supported • Protocol compatibility: Supported • Data format compatibility: Supported |
| AP Impact | • Plan change: No • Result value change: No • SQL syntax change: No • System object change: No • Existing feature change: No |
| Parameters | - |
| Workaround | - |