pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Tomas Vondra <tomas.vondra@2ndquadrant.com>
Cc: Andres Freund <andres@anarazel.de>
Cc: Dean Rasheed <dean.a.rasheed@gmail.com>
Cc: PostgreSQL Hackers <pgsql-hackers@postgresql.org>
Subject: Re: Multivariate MCV stats can leak data to unprivileged users
Date: Sat, 18 May 2019 19:44:20 -0400
Message-ID: <20866.1558223060@sss.pgh.pa.us> (raw)
In-Reply-To: <20190518232812.qpnjmydlx3uzzsj7@development>
References: <20190513223605.lwj65akict3tpetv@development>
	<CAEZATCWFCN2yBpqpw4kw6xhwdPNz8DERPOWNHHQ_qHV4=tbJ8A@mail.gmail.com>
	<20190517202938.lkx6q2u6woiptrsa@alap3.anarazel.de>
	<CAEZATCX9yU2eKL7-dCWTv1pMMi1hb+PsZyM6gjBxupDnMuEzRw@mail.gmail.com>
	<CAEZATCV5fo2E6K5EVN2uytGjMvhTKTizP_rOW67nPqNK8jHAAg@mail.gmail.com>
	<21269.1558192388@sss.pgh.pa.us>
	<CAEZATCW3iAJnU8opUCXb2i_-8syU7on4cdXLWHBeWr04v67HoQ@mail.gmail.com>
	<4E0E0C14-C476-446A-835F-CC3558709DA9@anarazel.de>
	<20190518190042.2y33h4toxk4fxv5t@development>
	<568.1558208711@sss.pgh.pa.us>
	<20190518232812.qpnjmydlx3uzzsj7@development>

Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
> On Sat, May 18, 2019 at 03:45:11PM -0400, Tom Lane wrote:
>> Tomas Vondra <tomas.vondra@2ndquadrant.com> writes:
>>> But that's not an issue intruduced by PG12, it works like that even for
>>> the extended statistics introduced in PG10.

>> Yeah, but no time like the present to fix it if it's wrong ...

> Sorry, not sure I understand. Are you saying we should try to rework
> this before the beta1 release, or that we don't have time to do that?

> I think we have four options - rework it before beta1, rework it after
> beta1, rework it in PG13 and leave it as it is now.

Yup, that's about what the options are.  I'm just voting against
"change it in v13".  If we're going to change it, then the fewer
major versions that have the bogus definition the better --- and
since we're changing that catalog in v12 anyway, users will see
fewer distinct behaviors if we do this change too.

It's very possibly too late to get it done before beta1,
unfortunately.  But as Andres noted, post-beta1 catversion
bumps are hardly unusual, so I do not think "rework after
beta1" is unacceptable.

			regards, tom lane





view thread (34+ messages)  latest in thread

Message-ID: <20866.1558223060@sss.pgh.pa.us>
Permalink:  ../20866.1558223060@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/20866.1558223060@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, tomas.vondra@2ndquadrant.com, andres@anarazel.de, dean.a.rasheed@gmail.com
  Subject: Re: Multivariate MCV stats can leak data to unprivileged users
  In-Reply-To: <20866.1558223060@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox