Re: pg_get_functiondef forgets about most GUC_LIST_INPUT GUCs
Artur Zakirov <a.zakirov@postgrespro.ru>
From: Arthur Zakirov <a.zakirov@postgrespro.ru>
To: Michael Paquier <michael@paquier.xyz>
Cc: Kyotaro HORIGUCHI <horiguchi.kyotaro@lab.ntt.co.jp>, tgl@sss.pgh.pa.us, pavel.stehule@gmail.com, michael.paquier@gmail.com, pgsql-hackers@postgresql.org
Date: 2018-03-16T10:38:31Z
Lists: pgsql-hackers
On Fri, Mar 16, 2018 at 10:21:39AM +0900, Michael Paquier wrote: > On Thu, Mar 15, 2018 at 01:33:51PM +0300, Arthur Zakirov wrote: > > I think your approach has a vulnerability too. I believe that a > > non GUC_LIST_INPUT extension GUC which was used to create a function may > > become GUC_LIST_INPUT variable. If I'm not mistaken nothing stops from > > that. In this case values in proconfigislist won't be valide anymore. > > I don't understand what you mean here. Are you referring to a custom > GUC which was initially declared as not being a list, but became a list > after a plugin upgrade with the same name? Yes exactly. Sorry for the unclear message. > Isn't the author to blame in this case? Maybe he is. It may be better to rename a variable if it became a list. I haven't strong opinion here though. I wanted to point the case where proconfigislist column won't work. -- Arthur Zakirov Postgres Professional: http://www.postgrespro.com Russian Postgres Company
Commits
-
Prevent extensions from creating custom GUCs that are GUC_LIST_QUOTE.
- 846b5a525746 11.0 landed
-
Fix mishandling of quoted-list GUC values in pg_dump and ruleutils.c.
- be677bb5aa79 9.3.23 landed
- a35d72923165 9.5.13 landed
- 8132f0f3856d 9.6.9 landed
- 742869946f4f 11.0 landed
- 67e02cde7373 9.4.18 landed
- 66e92878aaec 10.4 landed