You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Noah Misch 01e8182c73 Replace last PushOverrideSearchPath() call with set_config_option(). ... The two methods don't cooperate, so set_config_option("search_path", ...) has been ineffective under non-empty overrideStack. This defect enabled an attacker having database-level CREATE privilege to execute arbitrary code as the bootstrap superuser. While that particular attack requires v13+ for the trusted extension attribute, other attacks are feasible in all supported versions. Standardize on the combination of NewGUCNestLevel() and set_config_option("search_path", ...). It is newer than PushOverrideSearchPath(), more-prevalent, and has no known disadvantages. The "override" mechanism remains for now, for compatibility with out-of-tree code. Users should update such code, which likely suffers from the same sort of vulnerability closed here. Back-patch to v11 (all supported versions). Alexander Lakhin. Reported by Alexander Lakhin. Security: CVE-2023-2454		2 years ago
..
data	…
expected	Replace last PushOverrideSearchPath() call with set_config_option().	2 years ago
sql	Replace last PushOverrideSearchPath() call with set_config_option().	2 years ago
.gitignore	…
Makefile	Replace last PushOverrideSearchPath() call with set_config_option().	2 years ago
seg--1.0--1.1.sql	Make contrib modules' installation scripts more secure.	5 years ago
seg--1.1--1.2.sql	Update contrib/seg for new scalarlesel/scalargesel selectivity functions.	8 years ago
seg--1.1.sql	Update extensions with GIN/GIST support for parallel query.	9 years ago
seg--1.2--1.3.sql	Make contrib modules' installation scripts more secure.	5 years ago
seg--1.3--1.4.sql	Remove deprecated containment operators for contrib types.	5 years ago
seg-validate.pl	Remove extraneous newlines added by perl copyright patch	4 years ago
seg.c	Fix contrib/seg to be more wary of long input numbers.	3 years ago
seg.control	Remove deprecated containment operators for contrib types.	5 years ago
segdata.h	Add some const decorations to prototypes	8 years ago
segparse.y	Fix contrib/seg to be more wary of long input numbers.	3 years ago
segscan.l	Exclude flex-generated code from coverage testing	8 years ago
sort-segments.pl	Remove extraneous newlines added by perl copyright patch	4 years ago