You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Lane 8ebdf41c26 Harden _int_matchsel() against being attached to the wrong operator. ... While the preceding commit prevented such attachments from occurring in future, this one aims to prevent further abuse of any already- created operator that exposes _int_matchsel to the wrong data types. (No other contrib module has a vulnerable selectivity estimator.) We need only check that the Const we've found in the query is indeed of the type we expect (query_int), but there's a difficulty: as an extension type, query_int doesn't have a fixed OID that we could hard-code into the estimator. Therefore, the bulk of this patch consists of infrastructure to let an extension function securely look up the OID of a datatype belonging to the same extension. (Extension authors have requested such functionality before, so we anticipate that this code will have additional non-security uses, and may soon be extended to allow looking up other kinds of SQL objects.) This is done by first finding the extension that owns the calling function (there can be only one), and then thumbing through the objects owned by that extension to find a type that has the desired name. This is relatively expensive, especially for large extensions, so a simple cache is put in front of these lookups. Reported-by: Daniel Firer as part of zeroday.cloud Author: Tom Lane <tgl@sss.pgh.pa.us> Reviewed-by: Noah Misch <noah@leadboat.com> Security: CVE-2026-2004 Backpatch-through: 14		4 weeks ago
..
bench	Update copyright for 2026	2 months ago
data	Fix integer-overflow problem in intarray's g_int_decompress().	2 years ago
expected	Fix GIN's shimTriConsistentFn to not corrupt its input.	11 months ago
sql	Fix GIN's shimTriConsistentFn to not corrupt its input.	11 months ago
.gitignore	…
Makefile	Remove deprecated containment operators for contrib types.	5 years ago
_int.h	Specialize intarray sorting	1 year ago
_int_bool.c	Use more palloc_object() and palloc_array() in contrib/	3 months ago
_int_gin.c	Mark commented out code as unused	2 months ago
_int_gist.c	Mark commented out code as unused	2 months ago
_int_op.c	Add missing Datum conversions	7 months ago
_int_selfuncs.c	Harden _int_matchsel() against being attached to the wrong operator.	4 weeks ago
_int_tool.c	Specialize intarray sorting	1 year ago
_intbig_gist.c	Mark commented out code as unused	2 months ago
intarray--1.0--1.1.sql	Add selectivity estimation functions for intarray operators.	11 years ago
intarray--1.1--1.2.sql	Make contrib modules' installation scripts more secure.	6 years ago
intarray--1.2--1.3.sql	Implement operator class parameters	6 years ago
intarray--1.2.sql	Update extensions with GIN/GIST support for parallel query.	10 years ago
intarray--1.3--1.4.sql	Remove <@ from contrib/intarray's GiST operator classes.	6 years ago
intarray--1.4--1.5.sql	Remove deprecated containment operators for contrib types.	5 years ago
intarray.control	Remove deprecated containment operators for contrib types.	5 years ago
meson.build	Update copyright for 2026	2 months ago