pg.ddx.io  pgsql-hackers@postgresql.org mailing list archive  

help / color / mirror / Atom feed
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Andrew Dunstan <andrew@dunslane.net>
Cc: Robert Haas <robertmhaas@gmail.com>
Cc: Noah Misch <noah@leadboat.com>
Cc: PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>
Cc: Peter Eisentraut <peter.eisentraut@enterprisedb.com>
Subject: Re: Converting contrib SQL functions to new style
Date: Wed, 14 Apr 2021 16:13:12 -0400
Message-ID: <3583532.1618431192@sss.pgh.pa.us> (raw)
In-Reply-To: <561ffd5c-3332-abb9-3e60-17b41f025a6b@dunslane.net>
References: <3395418.1618352794@sss.pgh.pa.us>
	<20210414020827.GA1232417@rfd.leadboat.com>
	<3441172.1618369873@sss.pgh.pa.us>
	<20210414125811.GB1263822@rfd.leadboat.com>
	<CA+TgmoaF_DKSPRnbkakkOufWMFpOBsA8fwE-mF0fF7aeH20zqg@mail.gmail.com>
	<3489827.1618411777@sss.pgh.pa.us>
	<CA+TgmoYQB1qxb=v9xVi09-f_HRDDqwUwfcuNpsZ2SF-ePpWJcw@mail.gmail.com>
	<3566011.1618422104@sss.pgh.pa.us>
	<CA+TgmobdzZc2UET6z_=e_Uia63Btb3jMX2bVSukWvE21y75o-g@mail.gmail.com>
	<3567049.1618423436@sss.pgh.pa.us>
	<561ffd5c-3332-abb9-3e60-17b41f025a6b@dunslane.net>

Andrew Dunstan <andrew@dunslane.net> writes:
> On 4/14/21 2:03 PM, Tom Lane wrote:
>> This may mean that squeezing these contrib changes into v14 is a lost
>> cause.  We certainly shouldn't try to do what I suggest above for
>> v14; but without it, these changes are just moving the security
>> issue to a different place rather than eradicating it completely.

> Is there anything else we should be doing along the eat your own dogfood
> line that don't have these security implications?

We can still convert the initdb-created SQL functions to new style,
since there's no security threat during initdb.  I'll make a patch
for that soon.

			regards, tom lane





view thread (44+ messages)  latest in thread

Message-ID: <3583532.1618431192@sss.pgh.pa.us>
Permalink:  ../3583532.1618431192@sss.pgh.pa.us/
Also on:    postgresql.org/message-id/3583532.1618431192@sss.pgh.pa.us

 · 

reply
Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Reply to all the recipients using the --to and --cc options:
  reply via email

  To: pgsql-hackers@postgresql.org
  Cc: tgl@sss.pgh.pa.us, andrew@dunslane.net, robertmhaas@gmail.com, noah@leadboat.com, pgsql-hackers@lists.postgresql.org, peter.eisentraut@enterprisedb.com
  Subject: Re: Converting contrib SQL functions to new style
  In-Reply-To: <3583532.1618431192@sss.pgh.pa.us>

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

This inbox is served by DDX for PostgreSQL; see mirroring instructions
for how to clone and mirror all data and code used for this inbox