Re: pg_upgrade in 9.5 broken for adminpack

Поиск
Список
Период
Сортировка
От Andreas Seltenreich
Тема Re: pg_upgrade in 9.5 broken for adminpack
Дата
Msg-id 87y4c6crt9.fsf@credativ.de
обсуждение исходный текст
Ответ на Re: pg_upgrade in 9.5 broken for adminpack  (Bruce Momjian <bruce@momjian.us>)
Ответы Re: pg_upgrade in 9.5 broken for adminpack  (Tom Lane <tgl@sss.pgh.pa.us>)
Список pgsql-hackers
Bruce Momjian writes:

> On Thu, Apr 16, 2015 at 11:29:07PM -0700, Jeff Janes wrote:
>> Of course after sending that it became obvious.  The C function is not getting
>> called because the SQL function is marked as being strict, yet is called with
>> NULL arguments.
>> 
>> Trivial patch attached to unset strict flag in pg_proc.h.
>> 
>> But  CATALOG_VERSION_NO probably needs another bump as well.
>
> Patch applied and catversion bumped.  Thanks.

Shouldn't there be some validation of arguments now that the function is
no longer marked strict?  Currently, unprivileged users can crash the
server calling binary_upgrade_create_empty_extension with null
arguments.  Found using sqlsmith.

regards,
Andreas



В списке pgsql-hackers по дате отправления:

Предыдущее
От: Pavel Stehule
Дата:
Сообщение: Re: count_nulls(VARIADIC "any")
Следующее
От: Tom Lane
Дата:
Сообщение: Re: pg_upgrade in 9.5 broken for adminpack