A Memory Ordering Bug in DataFusion's Hash Join, Found by Model Checking Rather Than Testing
DataFusion’s hash join probe partitions coordinate through a single AcqRel counter decrement; a subtle ordering bug was found with loom’s model checker and cannot be reproduced by …