Skip to content

Navigation Menu

Appearance settings

- AI CODE CREATION
  GitHub CopilotWrite better code with AI
  GitHub Copilot appDirect agents from issue to merge
  MCP Registry^NewIntegrate external tools
- DEVELOPER WORKFLOWS
  ActionsAutomate any workflow
  CodespacesInstant dev environments
  IssuesPlan and track work
  Code ReviewManage code changes
- APPLICATION SECURITY
  GitHub Advanced SecurityFind and fix vulnerabilities
  Code securitySecure your code as you build
  Secret protectionStop leaks before they start
- EXPLORE
  Why GitHub
  Documentation
  Blog
  Changelog
  Marketplace
View all features
- BY COMPANY SIZE
  Enterprises
  Small and medium teams
  Startups
  Nonprofits
- BY USE CASE
  App Modernization
  DevSecOps
  DevOps
  CI/CD
  View all use cases
- BY INDUSTRY
  Healthcare
  Financial services
  Manufacturing
  Government
  View all industries
View all solutions
- EXPLORE BY TOPIC
  AI
  Software Development
  DevOps
  Security
  View all topics
- EXPLORE BY TYPE
  Customer stories
  Events & webinars
  Ebooks & reports
  Business insights
  GitHub Skills
- SUPPORT & SERVICES
  Documentation
  Customer support
  Community forum
  Trust center
  Partners
View all resources
- COMMUNITY
  GitHub SponsorsFund open source developers
- PROGRAMS
  Security Lab
  Maintainer Community
  Accelerator
  GitHub Stars
  Archive Program
- REPOSITORIES
  Topics
  Trending
  Collections
- ENTERPRISE SOLUTIONS
  Enterprise platformAI-powered developer platform
- AVAILABLE ADD-ONS
  GitHub Advanced SecurityEnterprise-grade security features
  Copilot for BusinessEnterprise-grade AI features
  Premium SupportEnterprise-grade 24/7 support
Pricing

Search code, repositories, users, issues, pull requests...

Search

Clear

Search syntax tips

Provide feedback

We read every piece of feedback, and take your input very seriously.

Include my email address so I can be contacted

Saved searches

Use saved searches to filter your results more quickly

Name

Query

To see all available qualifiers, see our documentation.

Appearance settings

You signed in with another tab or window. Reload to refresh your session. You signed out in another tab or window. Reload to refresh your session. You switched accounts on another tab or window. Reload to refresh your session.

Dismiss alert

Uh oh!

There was an error while loading. Please reload this page.

MaterializeInc / materialize Public

Notifications You must be signed in to change notification settings
Fork 513
Star 6.3k

Code
Pull requests 626
Discussions
Actions
Projects
Security and quality
Insights

Additional navigation options

Code
Pull requests
Discussions
Actions
Projects
Security and quality
Insights

sql: Fix pretty/display round-trip bugs found by fuzzing#36983

Merged

def- merged 52 commits into

MaterializeInc:mainMaterializeInc/materialize:mainfrom

def-:fuzz-sqldef-/materialize:fuzz-sqlCopy head branch name to clipboard

Jun 16, 2026

Conversation Commits52 (52)Checks Files changed

Merged

sql: Fix pretty/display round-trip bugs found by fuzzing#36983
def- merged 52 commits into
MaterializeInc:mainfrom
def-:fuzz-sql

Commits

Commits on Jun 16, 2026

sql-parser: Escape single quotes in HexString AstDisplay
def-
committed
sql-parser: Disambiguate field-access receivers with parens
def-
committed
sql-parser: Force-quote function names that clash with special-grammar keywords
def-
committed
sql-parser: Force-quote `map` type name in AstDisplay
def-
committed
sql-parser: Quote context-sensitive keywords as identifiers
def-
committed
sql-parser: Parenthesize low-precedence LHS of quantified comparisons
def-
committed
sql-parser: Don't force-quote context-sensitive keywords in identifier display
def-
committed
sql-parser: Cap maybe_parse failures to prevent exponential backtracking

def-
and
claude
committed
sql-parser: Quote renaming type-name keywords on display

def-
and
claude
committed
sql-pretty: Quote special-grammar function names

def-
and
claude
committed
sql-parser: Parenthesize subscript receivers with keyword names

def-
and
claude
committed
sql-parser: Check qualified type names for canonicalizing keywords

def-
and
claude
committed
sql-lexer: Mark DISTINCT as always reserved

def-
and
claude
committed
sql-parser: Scale maybe_parse failure cap with token count

def-
and
claude
committed
sql-parser: Remove dead ROLE branch in connection option name

def-
and
claude
committed
sql-parser: Omit leading comma in CREATE TABLE with no columns

def-
and
claude
committed
sql-parser: Unwrap (SHOW …) into a top-level Show statement

def-
and
claude
committed
sql-lexer: Mark ALL as always reserved

def-
and
claude
committed
sql-parser: Escape single quotes in protobuf MESSAGE name on display

def-
and
claude
committed
sql-parser: Display SUBSCRIBE TO so keyword-named relations round-trip

def-
and
claude
committed
sql-parser: Bound table-factor recursion to reject deeply-nested parens

def-
and
claude
committed
sql-parser: Quote query-body keywords used as identifiers

def-
and
claude
committed
sql-parser: Bound iterative expression chain depth

def-
and
claude
committed
sql-parser: Parenthesize a SHOW query body on display

def-
and
claude
committed
sql-parser: Don't use EXTRACT/POSITION special display for table functions

def-
and
claude
committed
sql-parser: Quote `list` as a special-grammar function name on display

def-
and
claude
committed
sql-parser: Quote `as` identifier on display

def-
and
claude
committed
sql-parser: Only special-display `extract` when its field is a string

def-
and
claude
committed
sql-parser: Reject an empty resolved cluster/network-policy id

def-
and
claude
committed
sql-parser: Quote identifiers needing it in FETCH cursor and resolved-name display

def-
and
claude
committed
sql-parser: Parenthesize a SHOW-led set operation on display

def-
and
claude
committed
sql-parser: Parenthesize a numeric cast operand under a prefix operator on display

def-
and
claude
committed
sql-parser: Quote quantifier-keyword function names on display

def-
and
claude
committed
sql: Quote bare ANY/ALL/SOME identifiers so they round-trip

def-
and
claude
committed
sql: Fix three pretty/display round-trip bugs found by grammar fuzzing

def-
and
claude
committed
sql: Fix more pretty/display round-trip bugs found by grammar fuzzing

def-
and
claude
committed
sql: Restrict the position special form to a primary needle

def-
and
claude
committed
sql: Parenthesize low-precedence COLLATE operands

def-
and
claude
committed
sql: Parenthesize prefix-operator operands by precedence

def-
and
claude
committed
sql: Don't parenthesize unary-operator operands of prefix operators

def-
and
claude
committed
sql: Fix GRANT/REVOKE ON ALL POLICIES display round-trip

def-
and
claude
committed
sql-pretty: Print secrets in DECLARE/PREPARE inner statements

def-
and
claude
committed
sql-parser: Quote a `PREPARE` identifier so DEALLOCATE round-trips

def-
and
claude
committed
sql-parser: Quote an `IN` index name so CREATE INDEX round-trips

def-
and
claude
committed
sql-pretty: Quote an `IN` index name in the pretty printer too

def-
and
claude
committed
sql-parser: Quote a `WHEN` identifier so a CASE operand round-trips

def-
and
claude
committed
sql-pretty: Cover the DECLARE/PREPARE secret case in the lossless round-trip test
def-
committed
sql-parser: Cap the expression chain at EXPR_CHAIN_LIMIT (1024)
def-
committed
tests: Update SQL goldens for the identifier-quoting fixes
def-
committed
sql: Quote ALL/DISTINCT identifiers on display, not at parse time

def-
and
claude
committed
address reviewer comment
def-
committed
address reviewer comments (#2)
def-
committed

Footer

© 2026 GitHub, Inc.

Footer navigation

Terms
Privacy
Security
Status
Community
Docs
Contact

You can’t perform that action at this time.