X-Original-To: pgsql-docs@postgresql.org
Received: from mail.gmx.net (mail.gmx.net [213.165.64.20])
	by postgresql.org (Postfix) with SMTP id D9C9A4762EF
	for <pgsql-docs@postgresql.org>; Wed,  5 Mar 2003 12:13:01 -0500 (EST)
Received: (qmail 3030 invoked by uid 0); 5 Mar 2003 17:13:06 -0000
Received: from p3E9E70C1.dip0.t-ipconnect.de (62.158.112.193)
	by mail.gmx.net (mp018-rz3) with SMTP; 5 Mar 2003 17:13:06 -0000
Date: Wed, 5 Mar 2003 18:13:17 +0100 (CET)
From: Peter Eisentraut <peter_e@gmx.net>
X-X-Sender: peter@peter.localdomain
To: pgsql-docs@postgresql.org
Subject: Fast-Path documentation
Message-ID: <Pine.LNX.4.44.0303051339500.2224-100000@peter.localdomain>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
X-Archive-Number: 200303/3
X-Sequence-Number: 1681

The libpq documentation contains this:

"""
<productname>PostgreSQL</productname> provides a fast-path interface to
send function calls to the backend.  This is a trapdoor into system
internals and can be a potential security hole.  Most users will not need
this feature.
"""

Why and under what circumstances is this a security hole, and what is a
user to do about it?

-- 
Peter Eisentraut   peter_e@gmx.net