Re: BUG #7586: PL/Perl problem

Thanks a lot for explanation.
I'm planing to upgrade to pgsql 9.2 even for other reasons.
If I need to use earlier postgresql versions I'll fix my functions using
a text arguments instead of xml one.
I tried and It seams to work fine.

Regards
Franco Ricci





On 7-10-2012 7:06 PM, Tom Lane wrote:
> franco.ricci@phys.uniroma1.it writes:
>> I wrote the following function in Perl to make some operations with LLRP
>> command in a RFID application:
>> ----
>> CREATE OR REPLACE FUNCTION llrp_command.llrpenc_bytea(xml)
>>    RETURNS bytea AS
>> $BODY$
>>      use strict;
>>      use RFID::LLRP::Builder qw(encode_message);
> I don't know anything about RFID::LLRP::Builder, but some quick googling
> suggests that it accesses libxml2 under the hood.  If so, and if it
> relies on being able to fetch external entities, you're going to need to
> use PG 9.2 to make this work.  The fix for CVE-2012-3489 broke such
> cases in earlier branches.  Sorry about that, but the alternatives were
> worse; and in any case, pre-9.2 versions never made any serious effort
> to allow other uses of libxml2 inside the backend.  It's mostly luck
> that it worked for you before, I think.
>
>             regards, tom lane
>


--
Franco Ricci
LabIT
Sviluppo Servizi Informatici

Dipartimento di Fisica
Università di Roma "La Sapienza"
Piazzale Aldo Moro, 5
00185
Roma
Italy

tel +390649913449
fax +39064463158