Support explicit placement of the temporary-table schema within search_path.

Tom Lane <tgl@sss.pgh.pa.us>

Commit: aa27977fe21a7dfa4da4376ad66ae37cb8f0d0b5
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2007-04-20T02:37:38Z
Releases: 8.3.0
Support explicit placement of the temporary-table schema within search_path.
This is needed to allow a security-definer function to set a truly secure
value of search_path.  Without it, a malicious user can use temporary objects
to execute code with the privileges of the security-definer function.  Even
pushing the temp schema to the back of the search path is not quite good
enough, because a function or operator at the back of the path might still
capture control from one nearer the front due to having a more exact datatype
match.  Hence, disable searching the temp schema altogether for functions and
operators.

Security: CVE-2007-2138

Files