Re: Fix bug with accessing to temporary tables of other sessions

Jim Jones <jim.jones@uni-muenster.de>

View thread

From: Jim Jones <jim.jones@uni-muenster.de>

To: Daniil Davydov <3danissimo@gmail.com>

Cc: Stepan Neretin <slpmcf@gmail.com>, PostgreSQL Hackers <pgsql-hackers@postgresql.org>

Date: 2025-09-26T11:19:16Z

Lists: pgsql-hackers

Attachments

v10-0001-Fix-accessing-other-sessions-temp-tables.patch (text/x-patch) patch v10-0001
v10-0002-Test-cross-session-access-restrictions-on-tempor.patch (text/x-patch) patch v10-0002

The code LGTM (commit message still missing though)

Given that the lack of tests allowed this bug to go undetected until
now, I'd suggest to include additional tests in this patch to prevent
similar issues in the future. Something like 0002 attached. What do you
think?

Best, Jim

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Prevent access to other sessions' temp tables
- 4dfae59a1d31 17 (unreleased) landed
- 1b0dd08157bf 18 (unreleased) landed
- ce146621f786 19 (unreleased) landed
Add tests for cross-session temp table access
- 40927d458fe1 17 (unreleased) landed
- 1cd37a7a8dc6 18 (unreleased) landed
- 1fee0e857e33 19 (unreleased) landed
Doc: use "an SQL" consistently rather than "a SQL"
- b51f86e49a7f 18.0 cited
Modify the relcache to record the temp status of both local and nonlocal
- 948d6ec90fd3 8.4.0 cited