database/postgres
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2025-06-25 01:02:05 +03:00
Code Activity

Require the schema qualification in pg_temp.type_name(arg).

Browse Source 
Commit aa27977fe2 introduced this
restriction for pg_temp.function_name(arg); do likewise for types
created in temporary schemas.  Programs that this breaks should add
"pg_temp." schema qualification or switch to arg::type_name syntax.
Back-patch to 9.4 (all supported versions).

Reviewed by Tom Lane.  Reported by Tom Lane.

Security: CVE-2019-10208
This commit is contained in:
Noah Misch
2019-08-05 07:48:41 -07:00
parent 76c096bc06
commit 7da46192dd
9 changed files with 83 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
doc/src/sgml/config.sgml
View File

@ -5967,6 +5967,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv;
be searched <emphasis>before</> searching any of the path items.
</para>
<!-- To further split hairs, funcname('foo') does not use the temporary
schema, even when it considers typname='funcname'. This paragraph
refers to function names in a loose sense, "pg_proc.proname or
func_name grammar production". -->
<para>
Likewise, the current session's temporary-table schema,
<literal>pg_temp_<replaceable>nnn</></>, is always searched if it