java-topology/defects/duckdb/patch/duckdb-0004-deliminator-group-join-binding.patch

29 lines
1.3 KiB
Diff
Raw Permalink Blame History

This file contains ambiguous Unicode characters

This file contains Unicode characters that might be confused with other characters. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

# UNDF: UNDF-2026-000000766
# UNDF: (leave blank)
# DuckDB CWE-407: Deliminator aggregate group vs join binding check O(G×J)
# File: src/optimizer/deliminator.cpp
# Severity: MEDIUM — optimizer path for delim-join elimination
# Ratio: ~125x at G=J=250 (wide GROUP BY with many join conditions)
#
# The deliminator optimization checks whether all aggregate groups appear in
# the join bindings. It loops over aggr.groups (G) and calls std::find on
# join_bindings vector (J) for each — O(G×J).
# Fix: convert join_bindings to unordered_set for O(1) lookup.
--- a/src/optimizer/deliminator.cpp
+++ b/src/optimizer/deliminator.cpp
@@ -434,12 +434,14 @@
D_ASSERT(current_op.get().type == LogicalOperatorType::LOGICAL_AGGREGATE_AND_GROUP_BY);
const auto &aggr = current_op.get().Cast<LogicalAggregate>();
if (!aggr.grouping_functions.empty()) {
return;
}
+ std::unordered_set<ColumnBinding, ColumnBindingHashFunction> join_binding_set(join_bindings.begin(), join_bindings.end());
+
for (idx_t group_idx = 0; group_idx < aggr.groups.size(); group_idx++) {
- if (std::find(join_bindings.begin(), join_bindings.end(),
- ColumnBinding(aggr.group_index, ProjectionIndex(group_idx))) == join_bindings.end()) {
+ if (join_binding_set.find(ColumnBinding(aggr.group_index, ProjectionIndex(group_idx))) == join_binding_set.end()) {
return;
}
}