From: Stephen Frost <sfrost@snowman.net>
To: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Tomas Vondra <tomas.vondra@2ndquadrant.com>
Cc: Andres Freund <andres@anarazel.de>
Cc: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Multivariate MCV stats can leak data to unprivileged users
Date: Sat, 18 May 2019 19:48:41 -0400
Message-ID: <20190518234841.GE6197@tamriel.snowman.net> (raw)
In-Reply-To: <20866.1558223060@sss.pgh.pa.us>
References: <20190517202938.lkx6q2u6woiptrsa@alap3.anarazel.de>
<CAEZATCX9yU2eKL7-dCWTv1pMMi1hb+PsZyM6gjBxupDnMuEzRw@mail.gmail.com>
<CAEZATCV5fo2E6K5EVN2uytGjMvhTKTizP_rOW67nPqNK8jHAAg@mail.gmail.com>
<21269.1558192388@sss.pgh.pa.us>
<CAEZATCW3iAJnU8opUCXb2i_-8syU7on4cdXLWHBeWr04v67HoQ@mail.gmail.com>
<4E0E0C14-C476-446A-835F-CC3558709DA9@anarazel.de>
<20190518190042.2y33h4toxk4fxv5t@development>
<568.1558208711@sss.pgh.pa.us>
<20190518232812.qpnjmydlx3uzzsj7@development>
<20866.1558223060@sss.pgh.pa.us>
Greetings,
* Tom Lane (tgl@sss.pgh.pa.us) wrote:
> Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> > On Sat, May 18, 2019 at 03:45:11PM -0400, Tom Lane wrote:
> >> Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> >>> But that's not an issue intruduced by PG12, it works like that even for
> >>> the extended statistics introduced in PG10.
>
> >> Yeah, but no time like the present to fix it if it's wrong ...
>
> > Sorry, not sure I understand. Are you saying we should try to rework
> > this before the beta1 release, or that we don't have time to do that?
>
> > I think we have four options - rework it before beta1, rework it after
> > beta1, rework it in PG13 and leave it as it is now.
>
> Yup, that's about what the options are. I'm just voting against
> "change it in v13". If we're going to change it, then the fewer
> major versions that have the bogus definition the better --- and
> since we're changing that catalog in v12 anyway, users will see
> fewer distinct behaviors if we do this change too.
>
> It's very possibly too late to get it done before beta1,
> unfortunately. But as Andres noted, post-beta1 catversion
> bumps are hardly unusual, so I do not think "rework after
> beta1" is unacceptable.
Agreed.
Thanks,
Stephen
Attachments:
[application/pgp-signature] signature.asc (818B, ../20190518234841.GE6197@tamriel.snowman.net/2-signature.asc)
download
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Reply to all the recipients using the --to and --cc options:
reply via email
To: pgsql-hackers@postgresql.org
Cc: sfrost@snowman.net, tgl@sss.pgh.pa.us, tomas.vondra@2ndquadrant.com, andres@anarazel.de, dean.a.rasheed@gmail.com
Subject: Re: Multivariate MCV stats can leak data to unprivileged users
In-Reply-To: <20190518234841.GE6197@tamriel.snowman.net>
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox