pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tomas Vondra <tomas.vondra@2ndquadrant.com>
To: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: Tom Lane <tgl@sss.pgh.pa.us>
Cc: Stephen Frost <sfrost@snowman.net>
Cc: Andres Freund <andres@anarazel.de>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Multivariate MCV stats can leak data to unprivileged users
Date: Sun, 16 Jun 2019 01:24:28 +0200
Message-ID: <20190615232428.eljebxllgkrxt72b@development> (raw)
In-Reply-To: <20190613173745.pjmvxq7x4ceoosck@development>
References: <20190519173845.tgf7ku3vigwgndn5@development>
	<2509.1558289694@sss.pgh.pa.us>
	<20190519224459.7dsdnv5gsfmnm4em@development>
	<CAEZATCWdjDpuDkA8xnGzDAAmDekVONj2ZegqdAkjiQE4honh2w@mail.gmail.com>
	<23581.1558359144@sss.pgh.pa.us>
	<CAEZATCXtSSJmZGNiP8N1=hyHhrE3vM6w53qTpoiJgy6Jtai_3g@mail.gmail.com>
	<20190520181714.fm4a4yjtgffh6kst@development>
	<20190606203308.h6rfqzr7jhafgnzd@development>
	<CAEZATCWMjB7i_4TM49036heLPEjRFThPK2HF2sq38nx-aPUrdQ@mail.gmail.com>
	<20190613173745.pjmvxq7x4ceoosck@development>

On Thu, Jun 13, 2019 at 07:37:45PM +0200, Tomas Vondra wrote:
> ...
>
>OK, attached are patches fixing the issues reported by you and John
>Naylor, and squashing the parts into just two patches (catalog split and
>pg_stats_ext). Barring objections, I'll push those tomorrow.
>
>I've renamed columns in the _data catalog from 'stx' to 'stxd', which I
>think is appropriate given the "data" in catalog name.
>
>I'm wondering if we should change the examples in SGML docs (say, in
>planstats.sgml) to use the new pg_stats_ext view, instead of querying the
>catalogs directly. I've tried doing that, but I found the results less
>readable than what we currently have (especially for the MCV list, where
>it'd require matching elements in multiple arrays). So I've left this
>unchanged for now.
>

I've pushed those changes, after adding docs for the pg_stats_ext view.


regards

-- 
Tomas Vondra                  http://www.2ndQuadrant.com
PostgreSQL Development, 24x7 Support, Remote DBA, Training & Services 





view thread (34+ messages)  latest in thread

Message-ID: <20190615232428.eljebxllgkrxt72b@development>
Permalink:  ../20190615232428.eljebxllgkrxt72b@development/
Also on:    postgresql.org/message-id/20190615232428.eljebxllgkrxt72b@development

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tomas.vondra@2ndquadrant.com, dean.a.rasheed@gmail.com, tgl@sss.pgh.pa.us, sfrost@snowman.net, andres@anarazel.de
  Subject: Re: Multivariate MCV stats can leak data to unprivileged users
  In-Reply-To: <20190615232428.eljebxllgkrxt72b@development>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox