From: Noah Misch <noah@leadboat.com>
Date: Thu, 12 Sep 2013 00:10:15 +0000 (-0400)
Subject: Ignore interrupts during quickdie().
X-Git-Tag: REL9_0_14~8
X-Git-Url: https://granicus.if.org/sourcecode?a=commitdiff_plain;h=9553d0f03b17d96af304f767c596dace953c736e;p=postgresql

Ignore interrupts during quickdie().

Once the administrator has called for an immediate shutdown or a backend
crash has triggered a reinitialization, no mere SIGINT or SIGTERM should
change that course.  Such derailment remains possible when the signal
arrives before quickdie() blocks signals.  That being a narrow race
affecting most PostgreSQL signal handlers in some way, leave it for
another patch.  Back-patch this to all supported versions.
---

diff --git a/src/backend/tcop/postgres.c b/src/backend/tcop/postgres.c
index 363b60891e..3e63df7057 100644
--- a/src/backend/tcop/postgres.c
+++ b/src/backend/tcop/postgres.c
@@ -2610,6 +2610,13 @@ quickdie(SIGNAL_ARGS)
 	sigaddset(&BlockSig, SIGQUIT);		/* prevent nested calls */
 	PG_SETMASK(&BlockSig);
 
+	/*
+	 * Prevent interrupts while exiting; though we just blocked signals that
+	 * would queue new interrupts, one may have been pending.  We don't want a
+	 * quickdie() downgraded to a mere query cancel.
+	 */
+	HOLD_INTERRUPTS();
+
 	/*
 	 * If we're aborting out of client auth, don't risk trying to send
 	 * anything to the client; we will likely violate the protocol, not to