MIME-Version: 1.0
From: vaibhave postgres <postgresvaibhave@gmail.com>
Date: Thu, 9 Jul 2026 16:06:58 +0530
Message-ID: 
 <CAM_eQjy8rG7yExX5JMhA3UKycWfvtw6w-x-SBV+sPmKWAmXvMA@mail.gmail.com>
Subject: Rendezvous variables: safe to pass an access token between two
 extensions?
To: pgsql-hackers@postgresql.org
Content-Type: multipart/alternative; boundary="000000000000c355ce06562b34a2"
Archived-At: 
 <https://www.postgresql.org/message-id/CAM_eQjy8rG7yExX5JMhA3UKycWfvtw6w-x-SBV%2BsPmKWAmXvMA%40mail.gmail.com>
Precedence: bulk

--000000000000c355ce06562b34a2
Content-Type: text/plain; charset="UTF-8"

Hi all,

Extension A receives an access token and needs to hand it to extension B,
which publishes a handler function via a rendezvous variable
(find_rendezvous_variable).

Since rendezvous variables are just a global, name-keyed void * with no
notion of who populated the slot, is it safe to pass a sensitive value (the
token) this way? My worry is that another loaded module could register the
same name and receive the token instead of the intended extension B.

Is there a supported way to verify the publisher of a rendezvous variable,
or is there a better way to do this? Any prior art would help.

Thanks.

--000000000000c355ce06562b34a2
Content-Type: text/html; charset="UTF-8"
Content-Transfer-Encoding: quoted-printable

<div dir=3D"ltr">Hi all,=C2=A0<div><br></div><div>Extension A receives an a=
ccess token and needs to hand it to extension B, which publishes a handler =
function via a rendezvous variable (find_rendezvous_variable).</div><div><b=
r></div><div>Since rendezvous variables are just a global, name-keyed void =
* with no notion of who populated the slot, is it safe to pass a sensitive =
value (the token) this way? My worry is that another loaded module could re=
gister the same name and receive the token instead of the intended extensio=
n B.=C2=A0</div><div><br></div><div>Is there a supported way to verify the =
publisher of a rendezvous variable, or is there a better way to do this? An=
y prior art would help.</div><div><br></div><div>Thanks.</div></div>

--000000000000c355ce06562b34a2--