SIGSEGV (signal 11) when anon role calls SECURITY DEFINER function without EXECUTE via PostgREST LATERAL CTE on local stack

## Environment | Component | Version | |---|---| | Supabase CLI | 2.98.2 | | PostgreSQL | 17.6 (aarch64-unknown-linux-gnu) | | PostgREST | 14.5 | | supautils | preloaded on `authenticator` (nix: `6kx8h7qz4plnh7rdibhl987nssdigiic-supautils`) | | Platform | macOS (Apple Silicon / Colima) | ## Summary Calling any `SECURITY DEFINER` function via PostgREST **as the `anon` role**, when `EXECUTE` has been explicitly revoked from `anon`, causes the PostgreSQL backend process to **terminate with signal 11 (Segmentation fault)** on the local Supabase stack. This affects **all** hardened SECURITY DEFINER functions, not a specific function. The crash is local-only — production Supabase returns HTTP 401 / SQLSTATE `42501` cleanly for the same call. ## Reproduction 1. Create any `SECURITY DEFINER` function in `public`: ```sql create or replace function public.example_fn(p_id uuid) returns jsonb language plpgsql security definer set search_path = public as $$ begin return null; end $$; revoke all on function public.example_fn(uuid) from public; revoke execute on function public.example_fn(uuid) from anon; grant execute on function public.example_fn(uuid) to authenticated; grant execute on function public.example_fn(uuid) to service_role; ``` 2. Call via PostgREST with the anon key (no JWT or anon-role JWT): ```bash curl -X POST http://127.0.0.1:54321/rest/v1/rpc/example_fn \ -H "apikey: <local-anon-key>" \ -H "Authorization: Bearer <local-anon-key>" \ -H "Content-Type: application/json" \ -d '{"p_id":"00000000-0000-0000-0000-000000000000"}' ``` 3. Observe PG logs: ``` LOG: server process (PID NNNNN) was terminated by signal 11: Segmentation fault DETAIL: Failed process was running: WITH pgrst_source AS (SELECT pgrst_call.pgrst_scalar FROM (SELECT NULL::integer AS id, NULL::text AS "Content-Type", ... LEFT JOIN LATERAL (SELECT "public"."example_fn"($1::uuid) pgrst_scalar) pgrst_call ON true) ... `…