Alvaro Herrera <alvherre@alvh.no-ip.org> writes:
> (Maybe we should audit it for security problems, just in case the
> distributors choose to include it in packages. The temp file usage for
> $TMPFILE looks "predictable," thus maybe it _is_ insecure. Apparently
> it can be made to clobber any existing file owned by whoever runs it.)
pg_regress already *is* shipped in packages (certainly the RPMs contain it)
so if you see any such problems, please do fix 'em.
regards, tom lane