Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in

Поиск
Список
Период
Сортировка
От Zeugswetter Andreas SB SD
Тема Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in
Дата
Msg-id 46C15C39FEB2C44BA555E356FBCD6FA4961E5D@m0114.s-mxs.net
обсуждение исходный текст
Список pgsql-hackers
> > Ok, now I vote, that you don't implement "any" and use "opaque".
> > I don't think we want two types that do the same thing.
> > Is it that you like the name "any" more than "opaque" ?
>
> No, it's that I want to deprecate "opaque" so that we can catch old
> uses that should not be there anymore.  If you look at your code and
> you decide that "any" is the correct semantics, then fine: change
> "opaque" to "any" and the warnings will go away.  But relatively few
> existing uses of "opaque" really mean "any", and I don't want the
> people who are using "opaque" to mean "cstring", "trigger", etc
> to keep using "opaque" for those other purposes.  The idea here is
> to force a security review.

That is what I have been trying to say, imho "any" should have the same
NOTICE as opaque has, since it is potentially dangerous.
I would suggest a warning NOTICE for opaque and not depricate it.

Imho the NOTICE should *not* go away.

If we want "any" in the future, it should imho always be passed a "safe"
Datum that includes type info. This will allow us to create a type "any"
that does not have the pitfalls of opaque.

Andreas


В списке pgsql-hackers по дате отправления:

Предыдущее
От: "Dave Page"
Дата:
Сообщение: Re: libpq++ and libpqxx removed
Следующее
От: Sir Mordred The Traitor
Дата:
Сообщение: Re: Upcoming Beta