Tom Lane 6be54294cb Repair insufficiently careful type checking for SQL-language functions: ... we should check that the function code returns the claimed result datatype every time we parse the function for execution. Formerly, for simple scalar result types we assumed the creation-time check was sufficient, but this fails if the function selects from a table that's been redefined since then, and even more obviously fails if check_function_bodies had been OFF. This is a significant security hole: not only can one trivially crash the backend, but with appropriate misuse of pass-by-reference datatypes it is possible to read out arbitrary locations in the server process's memory, which could allow retrieving database content the user should not be able to see. Our thanks to Jeff Trout for the initial report. Security: CVE-2007-0555		2007-02-02 00:04:16 +00:00
..
backend	Repair insufficiently careful type checking for SQL-language functions:	2007-02-02 00:04:16 +00:00
bin	Translation updates	2007-01-31 08:05:43 +00:00
corba	Convert files from DOS format to normal text.	2000-12-03 14:43:59 +00:00
data	I've sent 3 mails to pgsql-patches. There are two files, one for doc	1999-08-16 20:27:19 +00:00
include	Repair insufficiently careful type checking for SQL-language functions:	2007-02-02 00:04:16 +00:00
interfaces	Translation updates	2007-01-31 08:05:43 +00:00
makefiles	Use -fPIC on Sparc, per Tom Callaway.	2003-05-19 17:51:08 +00:00
pl	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:56:41 +00:00
port	Add port support for unsetenv() in back branches. Needed for locale	2006-01-05 00:51:52 +00:00
template	Mark SCO Openserver 5.0.4. supported by 7.3.1 as per chat report from user.	2002-12-11 22:27:34 +00:00
test	Fix back-branch pg_regress scripts to try the "canonical" expected file if we	2006-10-09 01:46:04 +00:00
tools	Stamp release 7.3.11.	2005-10-03 17:24:27 +00:00
tutorial	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:56:41 +00:00
utils	Re-add Win32 missing files, I think.	2002-11-02 02:00:35 +00:00
DEVELOPERS	just testing a script...	1999-07-30 03:45:57 +00:00
Makefile	Assorted fixes for Cygwin:	2002-09-05 18:28:46 +00:00
Makefile.global.in	Remove leftovers from subproject removals. Fixes for Python and Kerberos	2002-09-04 22:54:18 +00:00
Makefile.shlib	Cause symlinks for shared-library versioning to run in the standard	2003-01-11 17:22:34 +00:00
nls-global.mk	Avoid shell syntax error if list of languages is empty.	2002-09-02 22:19:42 +00:00
win32.mak	Remove all traces of multibyte and locale options. Clean up comments	2002-09-03 21:45:44 +00:00