You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Lane c0887b39dc Harden _int_matchsel() against being attached to the wrong operator. ... While the preceding commit prevented such attachments from occurring in future, this one aims to prevent further abuse of any already- created operator that exposes _int_matchsel to the wrong data types. (No other contrib module has a vulnerable selectivity estimator.) We need only check that the Const we've found in the query is indeed of the type we expect (query_int), but there's a difficulty: as an extension type, query_int doesn't have a fixed OID that we could hard-code into the estimator. Therefore, the bulk of this patch consists of infrastructure to let an extension function securely look up the OID of a datatype belonging to the same extension. (Extension authors have requested such functionality before, so we anticipate that this code will have additional non-security uses, and may soon be extended to allow looking up other kinds of SQL objects.) This is done by first finding the extension that owns the calling function (there can be only one), and then thumbing through the objects owned by that extension to find a type that has the desired name. This is relatively expensive, especially for large extensions, so a simple cache is put in front of these lookups. Reported-by: Daniel Firer as part of zeroday.cloud Author: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Noah Misch <noah@leadboat.com> Security: CVE-2026-2004 Backpatch-through: 14		1 week ago
..
backend	Harden _int_matchsel() against being attached to the wrong operator.	1 week ago
bin	Translation updates	1 week ago
common	Fix mb2wchar functions on short input.	1 week ago
fe_utils	…
include	Harden _int_matchsel() against being attached to the wrong operator.	1 week ago
interfaces	Translation updates	1 week ago
makefiles	…
pl	Translation updates	1 week ago
port	Fix O_CLOEXEC flag handling in Windows port.	2 months ago
template	…
test	Guard against unexpected dimensions of oidvector/int2vector.	1 week ago
timezone	Update time zone data files to tzdata release 2025c.	1 month ago
tools	Harden _int_matchsel() against being attached to the wrong operator.	1 week ago
tutorial	…
.gitignore	…
DEVELOPERS	…
Makefile	…
Makefile.global.in	Don't put library-supplied -L/-I switches before user-supplied ones.	7 months ago
Makefile.shlib	…
meson.build	…
nls-global.mk	Fix update-po for the PGXS case	4 months ago