summaryrefslogtreecommitdiff
path: root/src
AgeCommit message (Collapse)Author
2010-04-23Fix various instances of "the the".Robert Haas
Two of these were pointed out by Erik Rijkers; the rest I found.
2010-04-23Add missing optimizer hooks for function cost and number of rows.Simon Riggs
Closely follow design of other optimizer hooks: if hook exists retrieve value from plugin; if still not set then get from cache.
2010-04-23Previous patch revoked following objections.Simon Riggs
2010-04-23Make CheckRequiredParameterValues() depend upon correct combinationSimon Riggs
of parameters. Fix bug report by Robert Haas that error message and hint was incorrect if wrong mode parameters specified on master. Internal changes only. Proposals for parameter simplification on master/primary still under way.
2010-04-22Fix message punctuationPeter Eisentraut
2010-04-22Optimise btree delete processing when no active backends.Simon Riggs
Clarify comments, downgrade a message to DEBUG and remove some debug counters. Direct from ideas by Heikki Linnakangas.
2010-04-22Further reductions in Hot Standby conflict processing. TheseSimon Riggs
come from the realistion that HEAP2_CLEAN records don't always remove user visible data, so conflict processing for them can be skipped. Confirm validity using Assert checks, clarify circumstances under which we log heap_cleanup_info records. Tuning arises from bug fixing of earlier safety check failures.
2010-04-22Fix encoding issue when lc_monetary or lc_numeric are different encodingItagaki Takahiro
from lc_ctype, that could happen on Windows. We need to change lc_ctype together with lc_monetary or lc_numeric, and convert strings in lconv from lc_ctype encoding to the database encoding. The bug reported by Mikko, original patch by Hiroshi Inoue, with changes by Bruce and me.
2010-04-21Enforce superuser permissions checks during ALTER ROLE/DATABASE SET, ratherTom Lane
than during define_custom_variable(). This entails rejecting an ALTER command if the target variable doesn't have a known (non-placeholder) definition, unless the calling user is superuser. When the variable *is* known, we can correctly apply the rule that only superusers can issue ALTER for SUSET parameters. This allows define_custom_variable to apply ALTER's values for SUSET parameters at module load time, secure in the knowledge that only a superuser could have set the ALTER value. This change fixes a longstanding gotcha in the usage of SUSET-level custom parameters; which is a good thing to fix now that plpgsql defines such a parameter.
2010-04-21Only send cleanup_info messages if VACUUM removes any tuples.Simon Riggs
There is no other purpose for this message type than to report the latestRemovedXid of removed tuples, prior to index scans. Removes overlooked path for sending invalid latestRemovedXid. Fixes buildfarm failure on centaur.
2010-04-21Relax locking during GetCurrentVirtualXIDs(). Earlier improvementsSimon Riggs
to handling of btree delete records mean that all snapshot conflicts on standby now have a valid, useful latestRemovedXid. Our earlier approach using LW_EXCLUSIVE was useful when we didnt always have a valid value, though is no longer useful or necessary. Asserts added to code path to prove and ensure this is the case. This will reduce contention and improve performance of larger Hot Standby servers.
2010-04-21Fix oversight in collecting values for cleanup_info records.Simon Riggs
vacuum_log_cleanup_info() now generates log records with a valid latestRemovedXid set in all cases. Also be careful not to zero the value when we do a round of vacuuming part-way through lazy_scan_heap(). Incidentally, this reduces frequency of conflicts in Hot Standby.
2010-04-21Fix pg_hba.conf matching so that replication connections only match recordsTom Lane
with database = replication. The previous coding would allow them to match ordinary records too, but that seems like a recipe for security breaches. Improve the messages associated with no-such-pg_hba.conf entry to report replication connections as such, since that's now a critical aspect of whether the connection matches. Make some cursory improvements in the related documentation, too.
2010-04-21Move the check for whether walreceiver has authenticated as a superuserTom Lane
from walsender.c, where it didn't really belong, to postinit.c where it does belong (and is essentially free, too).
2010-04-20Arrange for client authentication to occur before we select a specificTom Lane
database to connect to. This is necessary for the walsender code to work properly (it was previously using an untenable assumption that template1 would always be available to connect to). This also gets rid of a small security shortcoming that was introduced in the original patch to eliminate the flat authentication files: before, you could find out whether or not the requested database existed even if you couldn't pass the authentication checks. The changes needed to support this are mainly just to treat pg_authid and pg_auth_members as nailed relations, so that we can read them without having to be able to locate real pg_class entries for them. This mechanism was already debugged for pg_database, but we hadn't recognized the value of applying it to those catalogs too. Since the current code doesn't have support for accessing toast tables before we've brought up all of the relcache, remove pg_authid's toast table to ensure that no one can store an out-of-line toasted value of rolpassword. The case seems quite unlikely to occur in practice, and was effectively unsupported anyway in the old "flatfiles" implementation. Update genbki.pl to actually implement the same rules as bootstrap.c does for not-nullability of catalog columns. The previous coding was a bit cheesy but worked all right for the previous set of bootstrap catalogs. It does not work for pg_authid, where rolvaliduntil needs to be nullable. Initdb forced due to minor catalog changes (mainly the toast table removal).
2010-04-20Fix code that doesn't work on machines with strict alignment requirements:Tom Lane
must use memcpy here rather than struct assignment. In passing, rearrange some randomly-ordered declarations to be a tad less random.
2010-04-20Rename standby_keep_segments to wal_keep_segments.Robert Haas
Also, make the name of the GUC and the name of the backing variable match. Alnong the way, clean up a couple of slight typographical errors in the related docs.
2010-04-20Move the responsibility for calling StartupXLOG into InitPostgres, forTom Lane
those process types that go through InitPostgres; in particular, bootstrap and standalone-backend cases. This ensures that we have set up a PGPROC and done some other basic initialization steps (corresponding to the if (IsUnderPostmaster) block in AuxiliaryProcessMain) before we attempt to run WAL recovery in a standalone backend. As was discovered last September, this is necessary for some corner-case code paths during WAL recovery, particularly end-of-WAL cleanup. Moving the bootstrap case here too is not necessary for correctness, but it seems like a good idea since it reduces the number of distinct code paths.
2010-04-19Add new message for explicit rejection by pg_hba.conf. ImplicitSimon Riggs
rejection retains same message as before.
2010-04-19Check RecoveryInProgress() while holding ProcArrayLock during snapshots.Simon Riggs
This prevents a rare, yet possible race condition at the exact moment of transition from recovery to normal running.
2010-04-19Fix uninitialized local variables. Not sure why gcc doesn't complain aboutTom Lane
these --- maybe because they're effectively unused? MSVC does complain though, per buildfarm.
2010-04-19Add wrapper function libpqrcv_PQexec() in the walreceiver that uses asyncMagnus Hagander
libpq to send queries, making the waiting for responses interruptible on platforms where PQexec() can't normally be interrupted by signals, such as win32. Fujii Masao and Magnus Hagander
2010-04-19Add an 'enable_material' GUC.Robert Haas
The logic for determining whether to materialize has been significantly overhauled for 9.0. In case there should be any doubt about whether materialization is a win in any particular case, this should provide a convenient way of seeing what happens without it; but even with enable_material turned off, we still materialize in cases where it is required for correctness. Thanks to Tom Lane for the review.
2010-04-18Fix bogus order of cleanup steps in plperl_inline_handler.Tom Lane
Per Alex Hunsaker
2010-04-18Improve sequence and sense of messages from pg_stop_backup().Simon Riggs
Now doesn't report it is waiting until it actually is waiting, plus message doesn't appear until at least 5 seconds wait, so we avoid reporting the wait before we've given the archiver a reasonable time to wake up and archive the file we just created earlier in the function. Also add new unconditional message to confirm safe completion. Now a normal, healthy execution does not report waiting at all, just safe completion.
2010-04-18Remove some additional changes in previous commit that belong elsewhere.Simon Riggs
2010-04-18Tune GetSnapshotData() during Hot Standby by avoiding loopSimon Riggs
through normal backends. Makes code clearer also, since we avoid various Assert()s. Performance of snapshots taken during recovery no longer depends upon number of read-only backends.
2010-04-16On Windows, syslogger runs in two threads. The main thread processes configHeikki Linnakangas
reload and rotation signals, and a helper thread reads messages from the pipe and writes them to the log file. However, server code isn't generally thread-safe, so if both try to do e.g palloc()/pfree() at the same time, bad things will happen. To fix that, use a critical section (which is like a mutex) to enforce that only one the threads are active at a time.
2010-04-16In standby mode, suppress repeated LOG messages about a corrupt record,Heikki Linnakangas
which just indicates that we've reached the end of valid WAL found in the standby.
2010-04-15Improve message style for messages associated with not being able toTom Lane
identify the system time zone setting. Per recent discussion.
2010-04-15Add script to enumerate the timezones in the Windows registry and compareMagnus Hagander
it with the list we have in pgtz.c, showing any differences.
2010-04-15Update XML features listPeter Eisentraut
2010-04-15Doc change: effect -> affect, per Robert HaasBruce Momjian
2010-04-14Fix plpgsql's exec_eval_expr() to ensure it returns a sane type OIDTom Lane
even when the expression is a query that returns no rows. So far as I can tell, the only caller that actually fails when a garbage OID is returned is exec_stmt_case(), which is new in 8.4 --- in all other cases, we might make a useless trip through casting logic, but we won't fail since the isnull flag will be set. Hence, backpatch only to 8.4, just in case there are apps out there that aren't expecting an error to be thrown if the query returns more or less than one column. (Which seems unlikely, since the error would be thrown if the query ever did return a row; but it's possible there's some never-exercised code out there.) Per report from Mario Splivalo.
2010-04-14Fix a problem introduced by my patch of 2010-01-12 that revised the wayTom Lane
relcache reload works. In the patched code, a relcache entry in process of being rebuilt doesn't get unhooked from the relcache hash table; which means that if a cache flush occurs due to sinval queue overrun while we're rebuilding it, the entry could get blown away by RelationCacheInvalidate, resulting in crash or misbehavior. Fix by ensuring that an entry being rebuilt has positive refcount, so it won't be seen as a target for removal if a cache flush occurs. (This will mean that the entry gets rebuilt twice in such a scenario, but that's okay.) It appears that the problem can only arise within a transaction that has previously reassigned the relfilenode of a pre-existing table, via TRUNCATE or a similar operation. Per bug #5412 from Rusty Conover. Back-patch to 8.2, same as the patch that introduced the problem. I think that the failure can't actually occur in 8.2, since it lacks the rd_newRelfilenodeSubid optimization, but let's make it work like the later branches anyway. Patch by Heikki, slightly editorialized on by me.
2010-04-14Typo fix. Kevin Grittner.Robert Haas
2010-04-14Fix minor typo in comment in xlog.cSimon Riggs
2010-04-13Allow Hot Standby to begin from a shutdown checkpoint.Heikki Linnakangas
Patch by Simon Riggs & me
2010-04-13Only try to do a graceful disconnect if we've successfully loaded theMagnus Hagander
shared library with the disconnect function in it. Fixes segmentation fault reported by Jeff Davis. Fujii Masao
2010-04-12Update the location of last removed WAL segment in shared memory onlyHeikki Linnakangas
after actually removing one, so that if we can't remove segments because WAL archiving is lagging behind, we don't unnecessarily forbid streaming the old not-yet-archived segments that are still perfectly valid. Per suggestion from Fujii Masao.
2010-04-12Need to use the start pointer of a block we read from WAL segment inHeikki Linnakangas
the calculation, not the end pointer, as pointed out by Fujii Masao.
2010-04-12Change the logic to decide when to delete old WAL segments, so that itHeikki Linnakangas
doesn't take into account how far the WAL senders are. This way a hung WAL sender doesn't prevent old WAL segments from being recycled/removed in the primary, ultimately causing the disk to fill up. Instead add standby_keep_segments setting to control how many old WAL segments are kept in the primary. This also makes it more reliable to use streaming replication without WAL archiving, assuming that you set standby_keep_segments high enough.
2010-04-09Perltidy run over the MSVC build system files, to clean up code formattingMagnus Hagander
and indentation styles.
2010-04-09Clean up inconsistent commasMagnus Hagander
2010-04-09Update list of Windows timezones we try to match localized names againstMagnus Hagander
to one that's up to date with Windows 2003R2.
2010-04-08Proceed to look for the next timezone when matching a localizedMagnus Hagander
Windows timezone name where the information in the registry is incomplete, instead of aborting. This fixes cases when the registry information is incomplete for a timezone that is alphabetically before the one that is in use. Per report from Alexander Forschner
2010-04-08Make smart shutdown work in combination with Hot Standby/Streaming Replication.Robert Haas
At present, killing the startup process does not release any locks it holds, so we must wait to stop the startup and walreceiver processes until all read-only backends have exited. Without this patch, the startup and walreceiver processes never exit, so the server gets permanently stuck in a half-shutdown state. Fujii Masao, with review, docs, and comment adjustments by me.
2010-04-07Fix to_char YYY, YY, Y format codes so that FM zero-suppression really works,Tom Lane
rather than only sort-of working as the previous attempt had left it. Clean up some unnecessary differences between the way these were coded and the way the YYYY case was coded. Update the regression test cases that proved that it wasn't working.
2010-04-07Allow quotes to be escaped in recovery.conf, by doubling them. This patchHeikki Linnakangas
also makes the parsing a little bit stricter, rejecting garbage after the parameter value and values with missing ending quotes, for example.
2010-04-07Forbid using pg_xlogfile_name() and pg_xlogfile_name_offset() duringHeikki Linnakangas
recovery. We might want to relax this in the future, but ThisTimeLineID isn't currently correct in backends during recovery, so the filename returned was wrong.