Tom Lane aa27977fe2 Support explicit placement of the temporary-table schema within search_path. ...

This is needed to allow a security-definer function to set a truly secure
value of search_path.  Without it, a malicious user can use temporary objects
to execute code with the privileges of the security-definer function.  Even
pushing the temp schema to the back of the search path is not quite good
enough, because a function or operator at the back of the path might still
capture control from one nearer the front due to having a more exact datatype
match.  Hence, disable searching the temp schema altogether for functions and
operators.

Security: CVE-2007-2138

2007-04-20 02:37:38 +00:00

..

backend

Support explicit placement of the temporary-table schema within search_path.

2007-04-20 02:37:38 +00:00

bin

Don't write timing output in quiet mode.

2007-04-16 20:15:38 +00:00

include

Repair PANIC condition in hash indexes when a previous index extension attempt

2007-04-19 20:24:04 +00:00

interfaces

Enable building of 64-bit libpq using visual studio 8 and the

2007-04-18 13:50:09 +00:00

makefiles

Add $(CFLAGS) to the simplified build rule for .so libraries on Darwin.

2006-11-28 05:45:43 +00:00

pl

Fix plpgsql to avoid reference to already-freed memory when returning a

2007-04-19 16:33:24 +00:00

port

Silence mingw compiler warning

2007-04-18 08:32:40 +00:00

template

Make --with-ldap build on Unixware, per Olivier Prenant.

2006-12-14 21:49:54 +00:00

test

Support explicit placement of the temporary-table schema within search_path.

2007-04-20 02:37:38 +00:00

timezone

Sync timezone data with 2007e zic release.

2007-04-19 22:44:32 +00:00

tools

Change default build to release, to be consistent with unix build.

2007-04-18 10:14:06 +00:00

tutorial

Replace direct assignments to VARATT_SIZEP(x) with SET_VARSIZE(x, len).

2007-02-27 23:48:10 +00:00

bcc32.mak

Remove old-style win32 client-only visual c++ build infrastructure for everything except

2007-03-05 14:18:38 +00:00

DEVELOPERS

Testing commit stuff

2006-07-10 15:50:02 +00:00

Makefile

Remove remains of old depend target.

2007-01-20 17:16:17 +00:00

Makefile.global.in

Add --with-libxslt configure option

2007-04-15 12:48:24 +00:00

Makefile.shlib

Change $(CC) to $(COMPILER) on Solaris gcc so -m64 is passed into the

2007-02-20 22:45:57 +00:00

nls-global.mk

When merging PO files, take into consideration translations in other PO

2006-04-05 13:40:15 +00:00

win32.mak

Remove old-style win32 client-only visual c++ build infrastructure for everything except

2007-03-05 14:18:38 +00:00