Repository navigation

Add SQL fuzzing (sql_exec, sql_gen + TLP) and fix the bugs it found - #387

Merged

KKould merged 32 commits into

mainfrom

test/fuzz-sql-exec

Oct 5, 2026

Commits on Oct 4, 2026
- test: add sql_exec fuzz target and CI smoke run
  KKould
  committed
  13c9bf9
- test: fail fuzz runs on OOM and tolerate trailing ignored timeouts
  KKould
  committed
  45f1f17
- fix: keep projected columns aligned when a skipped column is NULL
  KKould
  committed
  7346b55
- fix: only rearrange comparisons exactly and check integer negation
  KKould
  committed
  7985496
- fix: char_length/octet_length return BIGINT and NULL for NULL
  KKould
  committed
  bc6235a
- fix: do not rewrite DISTINCT group keys through shared select nodes
  KKould
  committed
  0b33328
- fix: allow sum(NULL)
  KKould
  committed
  74b8404
- fix: do not share the operand of expanded IN / BETWEEN
  KKould
  committed
  f702466
- fix: reject DISTINCT/GROUP BY/ORDER BY over SELECT-list scalar subqueries
  KKould
  committed
  49c2a70
- fix: cast equi-join keys of different types to a common type
  KKould
  committed
  c5c79e6
- fix: unify CASE branch types and allow unary operators on NULL
  KKould
  committed
  8249f8d
- chore: fix clippy warnings and drop dead code
  KKould
  committed
  5ac445c
- refactor: drop Pattern children and the test-only plan matcher
  KKould
  committed
  9b9386d
- fix: emit a row for every matched pair in nested loop join
  KKould
  committed
  ec89ee0
- fix: bind IN / BETWEEN evaluators and compare row values with SQL NULL semantics
  KKould
  committed
  952ddc8
- fix: push LIMIT through an outer join once and without its OFFSET
  KKould
  committed
  0f9e855
- fix: fold a negated number literal into one constant
  KKould
  committed
  458ce10
- fix: reject comparing row values of different degrees
  KKould
  committed
  5e55bc8
- fix: coalesce FULL JOIN USING columns in wildcard expansion
  KKould
  committed
  d9b5005
- test: restore crdb expectations changed on import
  KKould
  committed
  62503a3
- fix: coalesce FULL JOIN USING columns for tables with column aliases
  KKould
  committed
  3b69925
- fix: expand aliased table columns in declaration order
  KKould
  committed
  883188a
- chore: note NULL argument function lookup TODO and drop a comment
  KKould
  committed
  5817cf4
- feat: support ORDER BY column position
  KKould
  committed
  fb1bf81
- fix: reject ambiguous column references
  KKould
  committed
  e327315
- fix: reject multiple ORDER BY clauses and SELECT * without FROM
  KKould
  committed
  ccdf898
- refactor: drop the COLUMN_REF column from DESCRIBE
  KKould
  committed
  cc6a7bf
- test: upgrade sqllogictest and share one database across slt files
  KKould
  committed
  4198c96
Commits on Oct 5, 2026
- fix: reject outer references in the SELECT list of IN/ANY/ALL subqueries
  KKould
  committed
  3c9109f
- fix: avoid overflow in integer MIN % -1
  KKould
  committed
  fb2542b
- test: add structured sql_gen fuzz target with a TLP oracle
  KKould
  committed
  affdacf
- chore: bump kite_sql version to 0.5.0
  KKould
  committed
  a216e1e

Navigation Menu

Repository navigation

Add SQL fuzzing (sql_exec, sql_gen + TLP) and fix the bugs it found - #387

Add SQL fuzzing (sql_exec, sql_gen + TLP) and fix the bugs it found#387
KKould merged 32 commits into
mainfrom
test/fuzz-sql-exec

Commits on Oct 4, 2026

test: add sql_exec fuzz target and CI smoke run

test: fail fuzz runs on OOM and tolerate trailing ignored timeouts

fix: keep projected columns aligned when a skipped column is NULL

fix: only rearrange comparisons exactly and check integer negation

fix: char_length/octet_length return BIGINT and NULL for NULL

fix: do not rewrite DISTINCT group keys through shared select nodes

fix: allow sum(NULL)

fix: do not share the operand of expanded IN / BETWEEN

fix: reject DISTINCT/GROUP BY/ORDER BY over SELECT-list scalar subqueries

fix: cast equi-join keys of different types to a common type

fix: unify CASE branch types and allow unary operators on NULL

chore: fix clippy warnings and drop dead code

refactor: drop Pattern children and the test-only plan matcher

fix: emit a row for every matched pair in nested loop join

fix: bind IN / BETWEEN evaluators and compare row values with SQL NULL semantics

fix: push LIMIT through an outer join once and without its OFFSET

fix: fold a negated number literal into one constant

fix: reject comparing row values of different degrees

fix: coalesce FULL JOIN USING columns in wildcard expansion

test: restore crdb expectations changed on import

fix: coalesce FULL JOIN USING columns for tables with column aliases

fix: expand aliased table columns in declaration order

chore: note NULL argument function lookup TODO and drop a comment

feat: support ORDER BY column position

fix: reject ambiguous column references

fix: reject multiple ORDER BY clauses and SELECT * without FROM

refactor: drop the COLUMN_REF column from DESCRIBE

test: upgrade sqllogictest and share one database across slt files

Commits on Oct 5, 2026

fix: reject outer references in the SELECT list of IN/ANY/ALL subqueries

fix: avoid overflow in integer MIN % -1

test: add structured sql_gen fuzz target with a TLP oracle

chore: bump kite_sql version to 0.5.0