postgresql/src/backend/replication
Amit Kapila 08458bcaea Avoid stale slot access after dropping obsolete synced slots.
drop_local_obsolete_slots() continued to dereference local_slot after
calling ReplicationSlotDropAcquired().  Once the slot is dropped, its
entry in the slot array can be reused by another backend, so later reads
of local_slot->data could observe a different slot's name or database
OID, leading to an incorrect unlock and log message.

Save the slot name and database OID before performing the drop, and use
the saved values for the subsequent UnlockSharedObject() call and the log
message.  While at it, emit the "dropped replication slot" message only
when a slot was actually dropped, rather than unconditionally.

Author: Xuneng Zhou <xunengzhou@gmail.com>
Reviewed-by: Zhijie Hou <houzj.fnst@fujitsu.com>
Reviewed-by: Amit Kapila <amit.kapila16@gmail.com>
Reviewed-by: Fujii Masao <masao.fujii@gmail.com>
Backpatch-through: 17, where it was introduced
Discussion: https://postgr.es/m/TY4PR01MB177184FF9EE916F577E1F554194082@TY4PR01MB17718.jpnprd01.prod.outlook.com
2026-06-18 09:42:56 +05:30
..
libpqwalreceiver Clean up quoting of variable strings within replication commands. 2026-06-15 15:35:37 -04:00
logical Avoid stale slot access after dropping obsolete synced slots. 2026-06-18 09:42:56 +05:30
pgoutput Fix issue with EVENT TRIGGERS and ALTER PUBLICATION 2026-01-06 17:29:44 +13:00
.gitignore Build all Flex files standalone 2022-09-04 12:09:01 +07:00
Makefile Remove distprep 2023-11-06 15:18:04 +01:00
meson.build Update copyright for 2025 2025-01-01 11:21:55 -05:00
README postmaster: Rename some shutdown related PMState phase names 2025-01-10 11:43:00 -05:00
repl_gram.y Return yyparse() result not via global variable 2025-01-24 06:55:39 +01:00
repl_scanner.l Clean up quoting of variable strings within replication commands. 2026-06-15 15:35:37 -04:00
slot.c Fix race in ReplicationSlotRelease() for ephemeral slots 2026-06-03 18:46:49 +09:00
slotfuncs.c Fix use-after-free issue in slot synchronization. 2025-09-03 06:17:08 +00:00
syncrep.c Add translator comment 2026-02-19 17:11:04 +01:00
syncrep_gram.y Return yyparse() result not via global variable 2025-01-24 06:55:39 +01:00
syncrep_scanner.l Avoid throwing away the error message in syncrep_yyerror. 2025-07-28 10:57:10 -04:00
walreceiver.c Fix pgstat_count_io_op_time() calls passing incorrect information 2026-06-17 16:05:37 +09:00
walreceiverfuncs.c Avoid exposing WAL receiver raw conninfo during timeline jumps 2026-05-23 08:10:12 +09:00
walsender.c Fix race with timeline selection in logical decoding during promotion 2026-06-11 17:29:38 +09:00

src/backend/replication/README

Walreceiver - libpqwalreceiver API
----------------------------------

The transport-specific part of walreceiver, responsible for connecting to
the primary server, receiving WAL files and sending messages, is loaded
dynamically to avoid having to link the main server binary with libpq.
The dynamically loaded module is in libpqwalreceiver subdirectory.

The dynamically loaded module implements a set of functions with details
about each one of them provided in src/include/replication/walreceiver.h.

This API should be considered internal at the moment, but we could open it
up for 3rd party replacements of libpqwalreceiver in the future, allowing
pluggable methods for receiving WAL.

Walreceiver IPC
---------------

When the WAL replay in startup process has reached the end of archived WAL,
restorable using restore_command, it starts up the walreceiver process
to fetch more WAL (if streaming replication is configured).

Walreceiver is a postmaster subprocess, so the startup process can't fork it
directly. Instead, it sends a signal to postmaster, asking postmaster to launch
it. Before that, however, startup process fills in WalRcvData->conninfo
and WalRcvData->slotname, and initializes the starting point in
WalRcvData->receiveStart.

As walreceiver receives WAL from the primary server, and writes and flushes
it to disk (in pg_wal), it updates WalRcvData->flushedUpto and signals
the startup process to know how far WAL replay can advance.

Walreceiver sends information about replication progress to the primary server
whenever it either writes or flushes new WAL, or the specified interval elapses.
This is used for reporting purpose.

Walsender IPC
-------------

At shutdown, postmaster handles walsender processes differently from regular
backends. It waits for regular backends to die before writing the
shutdown checkpoint and terminating pgarch and other auxiliary processes, but
that's not desirable for walsenders, because we want the standby servers to
receive all the WAL, including the shutdown checkpoint, before the primary
is shut down. Therefore postmaster treats walsenders like the pgarch process,
and instructs them to terminate at the PM_WAIT_XLOG_ARCHIVAL phase, after all
regular backends have died and checkpointer has issued the shutdown checkpoint.

When postmaster accepts a connection, it immediately forks a new process
to handle the handshake and authentication, and the process initializes to
become a backend. Postmaster doesn't know if the process becomes a regular
backend or a walsender process at that time - that's indicated in the
connection handshake - so we need some extra signaling to let postmaster
identify walsender processes.

When walsender process starts up, it marks itself as a walsender process in
the PMSignal array. That way postmaster can tell it apart from regular
backends.

Note that no big harm is done if postmaster thinks that a walsender is a
regular backend; it will just terminate the walsender earlier in the shutdown
phase. A walsender will look like a regular backend until it's done with the
initialization and has marked itself in PMSignal array, and at process
termination, after unmarking the PMSignal slot.

Each walsender allocates an entry from the WalSndCtl array, and tracks
information about replication progress. User can monitor them via
statistics views.


Walsender - walreceiver protocol
--------------------------------

See manual.