pgsql: stringToNode() and deparse_expression_pretty() crash on invalid

Поиск
Список
Период
Сортировка
От heikki@postgresql.org (Heikki Linnakangas)
Тема pgsql: stringToNode() and deparse_expression_pretty() crash on invalid
Дата
Msg-id 20100630181132.2B31B7541D4@cvs.postgresql.org
обсуждение исходный текст
Список pgsql-committers
Log Message:
-----------
stringToNode() and deparse_expression_pretty() crash on invalid input,
but we have nevertheless exposed them to users via pg_get_expr(). It would
be too much maintenance effort to rigorously check the input, so put a hack
in place instead to restrict pg_get_expr() so that the argument must come
from one of the system catalog columns known to contain valid expressions.

Per report from Rushabh Lathia. Backpatch to 7.4 which is the oldest
supported version at the moment.

Tags:
----
REL8_0_STABLE

Modified Files:
--------------
    pgsql/src/backend/parser:
        parse_expr.c (r1.179.4.3 -> r1.179.4.4)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/backend/parser/parse_expr.c?r1=1.179.4.3&r2=1.179.4.4)
    pgsql/src/backend/tcop:
        fastpath.c (r1.77.4.1 -> r1.77.4.2)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/backend/tcop/fastpath.c?r1=1.77.4.1&r2=1.77.4.2)
    pgsql/src/include/catalog:
        pg_constraint.h (r1.14 -> r1.14.4.1)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/include/catalog/pg_constraint.h?r1=1.14&r2=1.14.4.1)

В списке pgsql-committers по дате отправления:

Предыдущее
От: heikki@postgresql.org (Heikki Linnakangas)
Дата:
Сообщение: pgsql: stringToNode() and deparse_expression_pretty() crash on invalid
Следующее
От: heikki@postgresql.org (Heikki Linnakangas)
Дата:
Сообщение: pgsql: stringToNode() and deparse_expression_pretty() crash on invalid