Re: pg_temp implicit search path: functions vs. tables

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: pg_temp implicit search path: functions vs. tables
Дата
Msg-id 12887.1287636459@sss.pgh.pa.us
обсуждение исходный текст
Ответ на pg_temp implicit search path: functions vs. tables  (Josh Kupershmidt <schmiddy@gmail.com>)
Ответы Re: pg_temp implicit search path: functions vs. tables  (Josh Kupershmidt <schmiddy@gmail.com>)
Список pgsql-general
Josh Kupershmidt <schmiddy@gmail.com> writes:
> pg_temp is being implicitly included in the default search path when
> looking for tables, but not for functions. Is there a reason for this
> difference?

Yes.  They used to be the same, but awhile back we decided it was a
security hole to look for functions or operators in the implicit temp
schema.  It makes it too easy for someone to substitute a trojan-horse
function that will be picked up in preference to whatever's in the
normal search path.  See CVE-2007-2138.

If you actually do want to define and call temporary functions, you
can include "pg_temp" in the search path explicitly, or perhaps better,
explicitly qualify the intentional calls with pg_temp.

            regards, tom lane

В списке pgsql-general по дате отправления:

Предыдущее
От: Scott Marlowe
Дата:
Сообщение: Re: Cannot Start Postgres After System Boot
Следующее
От: "Neil D'Souza"
Дата:
Сообщение: Re: a query on stored procedures/functions in pgsql