Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sZWRD-001Z88-Jp for pgsql-hackers@arkaria.postgresql.org; Thu, 01 Aug 2024 14:05:51 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.94.2) (envelope-from ) id 1sZWRC-00AHCT-06 for pgsql-hackers@arkaria.postgresql.org; Thu, 01 Aug 2024 14:05:50 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 (Exim 4.94.2) (envelope-from ) id 1sZWRB-00AHCJ-Kq for pgsql-hackers@lists.postgresql.org; Thu, 01 Aug 2024 14:05:49 +0000 Received: from mail-yb1-xb30.google.com ([2607:f8b0:4864:20::b30]) by magus.postgresql.org with esmtps (TLS1.3) tls TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 (Exim 4.94.2) (envelope-from ) id 1sZWR8-002cF6-PW for pgsql-hackers@lists.postgresql.org; Thu, 01 Aug 2024 14:05:48 +0000 Received: by mail-yb1-xb30.google.com with SMTP id 3f1490d57ef6-e05e94a979eso1783520276.0 for ; Thu, 01 Aug 2024 07:05:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=joeconway.com; s=google; t=1722521145; x=1723125945; darn=lists.postgresql.org; h=content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:from:to:cc:subject:date:message-id:reply-to; bh=I9TvqeuxfNfZ5VV13k6hd0bdo4B8Dve2SLazWQbQTZQ=; b=ccGDhPJh8GxEE5XPWfOrivFuPjHgb0FZXC6FBw55rPcnhxEPdRZPQSdIbN6oqaidSK sQ4AEt67Sl+0DOmYgNjjXaDmeoyq+pY20LikkgUaqvOFQqEcG88a8QFva87seg9K3krm 3jMGtkU5rWBdjJZyBVvrSXdpjZ2cWPLBwTwYzV0jKLIJ1Dnv0T77xGQM0WYcj5z8RpcD BhWQiphL9D/QK6jJck1eOQRjLglCpWLCn5ooH3jUm493sj/uQkAouAqhfGroduk4ZhYC CA1uHU36fCN32IoWaHF2Rq3j4cl+MiwhWtCsv0R8H97qmZM4VwDj5wtV5STlSs9kct4K u1yg== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20230601; t=1722521145; x=1723125945; h=content-transfer-encoding:in-reply-to:autocrypt:from :content-language:references:cc:to:subject:user-agent:mime-version :date:message-id:x-gm-message-state:from:to:cc:subject:date :message-id:reply-to; bh=I9TvqeuxfNfZ5VV13k6hd0bdo4B8Dve2SLazWQbQTZQ=; b=NdRBvgnfnNBFHBuNYObGYATvne/Km/Wl5xWPgW3jphqfs5dNMlZuUN/neZ/ex4ubpR DSFAp2NIi0MMX5A2nKug0ZP9UglrboCugMxliddtFvvIuzeeVQOc/+JTnduQYxNEr9ry oG/63aabHqTJaGZi9K9woggi4LmBif6BtWbjKVNawu1oqVHqA3xAtKi6O/5aarxOc4vt SmKAhuKF4n1aKOuLui2+F6S0A76Vs9qBnyZ2hLXuBr13aBa9PQpAYI5uCguDED98TRXc dbreFgvYehqO0mdApMRqpyQLivUv07Mu+lwsM98SHSM+NBNsdHbl2GWoeRgh2m2AZIBi 0kSQ== X-Forwarded-Encrypted: i=1; AJvYcCWKfwXkSv7KOd5zvUaEp2YC+QgDyFFDjOSCfkKYZJ5Xoo+GPeGH6beAAjbKbI4Xd2iMiJY7+2AW53r/Xj5X4k44ErlVoIGo4+3/979FGtA/XK+G X-Gm-Message-State: AOJu0YyCQqNjNMjZMSXJU5o30r/HKJucuma1qLGo22tQDdj6sxxHujdx ncZIlpLHiy8Uh7IN7RKpMkrkZDVE3BZyvfx0hiWWsOAZanpVqaHIxOOUQ9v/4N8= X-Google-Smtp-Source: AGHT+IGaVaFekwar2Nc8vMevk3fqaw6K1qhtaiVYS/HCPhkhdHUxORYh0EgXwwgrrrSWs8hgbOobUQ== X-Received: by 2002:a0d:e442:0:b0:630:4fab:a090 with SMTP id 00721157ae682-688556d09a7mr10315927b3.22.1722521144942; Thu, 01 Aug 2024 07:05:44 -0700 (PDT) Received: from [192.168.4.41] (162-239-31-113.lightspeed.dybhfl.sbcglobal.net. [162.239.31.113]) by smtp.gmail.com with ESMTPSA id 00721157ae682-6756c44ded1sm32836077b3.145.2024.08.01.07.05.44 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Thu, 01 Aug 2024 07:05:44 -0700 (PDT) Message-ID: <02f83435-c2c9-4ec5-846d-c2efd259cf43@joeconway.com> Date: Thu, 1 Aug 2024 10:05:44 -0400 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: can we mark upper/lower/textlike functions leakproof? To: Robert Haas Cc: Tom Lane , Andrew Dunstan , David Rowley , PostgreSQL Hackers References: <50d3a76e-afaa-44ed-aef5-6fb7f23cccab@dunslane.net> <5bef8bb0-7a50-4bcf-b052-2a12c3cda0f5@joeconway.com> <3416373.1722449026@sss.pgh.pa.us> <70b9e758-1050-4365-9d67-cc826faaf6a9@joeconway.com> Content-Language: en-US From: Joe Conway Autocrypt: addr=mail@joeconway.com; keydata= xsFNBEpXMCsBEADDnXUQzjlyi/cX02Gtdy2CLcroE5CsC7DJKdOBDbfgn0kfiIYoV5JniG4l VyzZUodY8yUAagqLYolh0UkBzs9N+qkm7erde4ypw3jzVQ37BuzIvk3nMUbuDZDgxWqX+nVS sKc+BQ5BpzgCHg48leoRO2ohjvYnUhgH3j2rFZCzaj6qQ7mv+XoxOJmUlVQtG06Jwkk7Vu14 7U9nMMM6hyUKzVnmCphnlcMNo26UyVU70MwFfFJgcI0c5fpp8byN56eD6VJVnufO5WAuEhzE qcrSJR2FAlmM90GBY+6vP29twLDCHuSFvrnujNCx/BvCC/a3/gPvyAFp4JtMm9eXAmq3m/Kw 94nTJXVdcbQeQQDp3KIG7MmWS4lnGvPn8v0CjgNaLvZXFLo1FgmUVsyEq1Lww4iRLa6sbpXJ ESx15UEue1k1YZM9C+4F/o3aeKNsAienjw2EXFzcaxIg/C4P493VMi3Qa8ycVxR5iYhUbYdo DFIUQhbFNsYfrtW/qZAELT3FCYFpZYG01e9Hj+cBrXXgyDDkQ5Lq4mlvmkRvuxn61V6Au4HA 0sJiCox5pM1FvzT+aI8HY1BYaiB9Pl4fhpKgmhhlSuglk9v39S4jmlUIb45iLAUVpeNM6Qjm 69pf5da9sm4aGFa7YlDSKf/WcU7z9ITZxsilOi2n7YJiwG7kTQARAQABzSRKb3NlcGggRSBD b253YXkgPG1haWxAam9lY29ud2F5LmNvbT7CwXoEEwEIACQCGwMCHgECF4AFCwkIBwMFFQoJ CAsFFgIDAQAFAlWTVvUCGQEACgkQMyt+aLaZQ0oPCQ/9HyRewMyvAIJRmoXoLAr8AoFLId6R qBJnNX0Lll0RLZui65aQ0+exwX7aH7TxWR16B2gWX3OmLfGT8XITOoG+zt9zsEpLvNkHchkF T/jyAcbuRj5WX9hamZgMbjXAJeCdlhW+fRA9Upb0w4dgBjqK5OgsqMikASL7t2vogHl9H08j vSoQLW+8wTnSBXBeBTBwB7xLIin5WVivzFHUCrnD2UsjeBIW3fmGdpTAjSxRzG+UPYVwXQ8F FLt7DpEytvLWapmZWMRdj0WZ/Q3SOO/Ed0yFqbzuwKaWcFrQBNeS2Sig+FefBNS98f9Hx7ku H3DW34qX/zSSdDh0jLs7X3PkIgF6BZR2TxaCwHPP9ERDiDaUInC9U7We1iZE1DjW8rLMEVJB hY0ClrrF67pnUKTbcU+uajpPn+2Jl74T0Set/XxpHZ4cezcJuqg31R8vHZgd5cf1WKP0D0pc qiuS02BBFkNCs1jQ+raTWcDuE6F1mUO2nvjUBN9r4y5DUbCNSqLKeAe/aA6JaSDkBpoXKdNS +c4rbzbktWkfUW8EhVlCGzNpy4ezEoVsqV2Ex7fNoxsE2vnSylLT9hycAmYf8ryMvniRZqnD T4JgLenIcQlkhB896T7wApOXfD8OJj1/XFxAfPi6vdlsr81uoxuB4euLp8IyduwLORRUogO9 zmAXG5jOwU0ESlcyJwEQAOkTBb9yDhJbMUgvhM11rZwT5tm4Y9TqtEHn0Zy3t9g7bdFFpMva v/KENd3oAtLFpMDf+H3AggFk4ftUwJwiVgJ88ilvCynJUGXiuYIaexY4DLgn4xpnuiEpYEFV dWnlw7dWVTc62exfqIz9bSWRzwfBCY9ruYGEb4RDPDSNSAVyI7sxHzef2asiYxIcxrTrw5Vu gWNlPZcV5/EJ6PUvATjBF2TBkXV7KOciQng2tsQGrGMkY5mduNqwpuh6zfPcVF8LeObe96wv 5ZhPRpO79nef7hnK2lJogp3JIo558Jlbz9WHtQEMZR85+bUhtI825QyNAFz3Jrn7NMgvDikc 2OrWo7YMgMC5hDSWVFqA6/EQCNnDWGABWgeYHZFpnPwsvUWIYdhSilUuj/Tuzvz9ZmucFNbQ bauDQw6VQ38ofGnoYDZFJsGncprB8dBi4tDrIQ+1RlIh6C2Z/eMipqJOT26+spluTjouvnKT 0S5yOgyX0PjbsysgwQdCGNJLHOjhHbSpSmOLaduV3CQo/0+DHT/TBjYfIXjTWouY9TkGxG4e NrxU0u2xAy5bMqOPmsFdjLTWlQUlF/fTMhB54XwI3FHWgnSnXZzStDTmTebLNdT/ftgliAzA 81uMj49j0exv731/v+7udLA1bV8gnZ01zQCASDpWiRQR3fgwcugSUqgRABEBAAHCwV8EGAEI AAkFAkpXMicCGwwACgkQMyt+aLaZQ0pwAQ//bjcWnZg/jjRQ9gbZUGMqniItZYRglBMKIqt4 Fia379JmHwTvavnFkJ8XMZ56UB0FIrgS+sUkRH6cPRQR+7Qi392LD021DXgSsz9CwFHjFyBG HwLEOTRcfYQbtJy0shHDJB4aQTOX3ERDH1PsvJNuevmQMzS0DWFav9+xMz9rKP4N+HffoBIZ E0C1xIE43nD4eLsbycte9sVIrmlNuUti3qUxJAQw8HwfJ6ZbBInHxquApR16uD1u99o6Xlnd FrDlY22tRmHCM0bR81GfGNdcU3Uo+rG/R/k4qa7s9/dgKvMbyH3fHhp/ceKag80Xo8IFurRl 0ZJP3sHJ2QDHCVLat7jRZ+43hi1WlIhFbrgn6IyI0i7XR/W8JjrC5MsKq4TUwGH077sU/kcH YebVJZRbUUst2hAGHDFVBcG12qoKf+ltL9qXJc1y7BGeCoUW6QjOpljpq6ZL4FQUsM0RSRjs 5egE3szPcIf5SyPK6WDOApoAq6M7BBFMGDZwEylYMtr0YekA1u86UA9D2xwLHEbBBp/uiby1 c9JbPJ1Pn8zJP8WZNeRw4Q9TtqVK09+oLirMUSpIDd6KdZ1VgRxOK2re7tjDvkVuYsSrsiJ+ 1iJNEnp9iK0ok0DlJpSCe6KhkxpaTdeoWMXdKuJWec0NIqoAd54ZgBPnr+UPxTixgPq/p6Q= In-Reply-To: Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Archived-At: Precedence: bulk On 8/1/24 07:57, Robert Haas wrote: > On Wed, Jul 31, 2024 at 4:42 PM Joe Conway wrote: >> You are assuming that everyone allows direct logins with the ability to >> create procedures. Plenty don't. > > Well, if you can send queries, then you can do the same thing, driven > by client-side logic. Sure. Of course you should be monitoring your production servers for anomalous workloads, no? "Gee, why is Joe running the same query millions of times that keeps throwing errors? Maybe we should go see what Joe is up to" > If you can't directly send queries in any form, then I guess things > are different. Right, and there are plenty of those. I have even worked with at least one rather large one on behalf of your employer some years ago. > But I don't really understand what kind of system you have in mind. Well I did say I was being hand wavy ;-) It has been a long time since I thought deeply about this. I will try to come back with something more concrete if no one beats me to it. -- Joe Conway PostgreSQL Contributors Team RDS Open Source Databases Amazon Web Services: https://aws.amazon.com