You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Stephen Frost db69e58a06 Reset plan->row_security_env and planUserId ... In the plancache, we check if the environment we planned the query under has changed in a way which requires us to re-plan, such as when the user for whom the plan was prepared changes and RLS is being used (and, therefore, there may be different policies to apply). Unfortunately, while those values were set and checked, they were not being reset when the query was re-planned and therefore, in cases where we change role, re-plan, and then change role again, we weren't re-planning again. This leads to potentially incorrect policies being applied in cases where role-specific policies are used and a given query is planned under one role and then executed under other roles, which could happen under security definer functions or when a common user and query is planned initially and then re-used across multiple SET ROLEs. Further, extensions which made use of CopyCachedPlan() may suffer from similar issues as the RLS-related fields were not properly copied as part of the plan and therefore RevalidateCachedQuery() would copy in the current settings without invalidating the query. Fix by using the same approach used for 'search_path', where we set the correct values in CompleteCachedPlan(), check them early on in RevalidateCachedQuery() and then properly reset them if re-planning. Also, copy through the values during CopyCachedPlan(). Pointed out by Ashutosh Bapat. Reviewed by Michael Paquier. Back-patch to 9.5 where RLS was introduced. Security: CVE-2016-2193		10 years ago
..
examples	…
isolation	Fix EvalPlanQual bug when query contains both locked and not-locked rels.	10 years ago
locale	…
mb	Revert "Fix broken multibyte regression tests."	10 years ago
modules	Fix phony .PHONY.	10 years ago
perl	Avoid odd portability problem in TestLib.pm's slurp_file function.	10 years ago
regress	Reset plan->row_security_env and planUserId	10 years ago
ssl	Clean the last few TAP suite tmp_check directories.	10 years ago
thread	…
Makefile	…