Re: [BUG] SECURITY DEFINER on call handler makes daemon crash
Tom Lane <tgl@sss.pgh.pa.us>
From: Tom Lane <tgl@sss.pgh.pa.us>
To: Robert Haas <robertmhaas@gmail.com>
Cc: KaiGai Kohei <kaigai@ak.jp.nec.com>, PostgreSQL-Hackers <pgsql-hackers@postgresql.org>
Date: 2010-03-20T00:11:13Z
Lists: pgsql-hackers
Robert Haas <robertmhaas@gmail.com> writes: > On Fri, Mar 19, 2010 at 8:18 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote: >> KaiGai Kohei <kaigai@ak.jp.nec.com> writes: >>> When we assign "SECURITY DEFINER" attribute on plpgsql_call_handler(), >>> it makes server process crashed. >> >> So don't do that. Whatever possessed you to think that's a sensible >> idea anyway? > It might not be sensible, but the whole server going down as a result > doesn't seem very sensible either. [ shrug... ] If you would like to start enumerating the ways in which you can crash the server with erroneous pg_proc entries for C functions, go for it. It'll keep you out of trouble for a very long time. regards, tom lane