Dup and freeze complex types when making query attributes

This avoids problems when complex data structures are mutated _after_
being handed to ActiveRecord for processing.  For example false hits in
the query cache.

Fixes rails#46044

Author: tenderlove

activemodel/lib/active_model/type/helpers/mutable.rb

@@ -4,6 +4,10 @@ module ActiveModel
   module Type
     module Helpers # :nodoc: all
       module Mutable
+        def immutable_value(value)
+          value.deep_dup.freeze
+        end
+
         def cast(value)
           deserialize(serialize(value))
         end

activemodel/lib/active_model/type/value.rb

@@ -129,6 +129,10 @@ def hash
       def assert_valid_value(_)
       end
 
+      def immutable_value(value) # :nodoc:
+        value
+      end
+
       private
         # Convenience method for types which do not need separate type casting
         # behavior for user and database inputs. Called by Value#cast for

activerecord/CHANGELOG.md

@@ -1,3 +1,7 @@
+*   Fix a case where the query cache can return wrong values. See #46044
+
+    *Aaron Patterson*
+
 *   Support MySQL's ssl-mode option for MySQLDatabaseTasks.
 
     Verifying the identity of the database server requires setting the ssl-mode

activerecord/lib/active_record/relation/predicate_builder.rb

@@ -65,7 +65,8 @@ def build(attribute, value, operator = nil)
     end
 
     def build_bind_attribute(column_name, value)
-      Relation::QueryAttribute.new(column_name, value, table.type(column_name))
+      type = table.type(column_name)
+      Relation::QueryAttribute.new(column_name, type.immutable_value(value), type)
     end
 
     def resolve_arel_attribute(table_name, column_name, &block)

activerecord/test/cases/query_cache_test.rb

@@ -676,10 +676,10 @@ def setup
   end
 
   def test_query_cache_handles_mutated_binds
-    record = JsonObj.create(payload: { a: 1 })
+    JsonObj.create(payload: { a: 1 })
 
     search = HashWithFixedHash[a: 1]
-    the_record = JsonObj.where(payload: search).first # populate the cache
+    JsonObj.where(payload: search).first # populate the cache
 
     search.merge!(b: 2)
     assert_nil JsonObj.where(payload: search).first, "cache returned a false positive"