Andrew Dunstan e089e04d3e Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is ... fundamentally insecure. Instead apply an opmask to the whole interpreter that imposes restrictions on unsafe operations. These restrictions are much harder to subvert than is Safe.pm, since there is no container to be broken out of. Backported to release 7.4. In releases 7.4, 8.0 and 8.1 this also includes the necessary backporting of the two interpreters model for plperl and plperlu adopted in release 8.2. In versions 8.0 and up, the use of Perl's POSIX module to undo its locale mangling on Windows has become insecure with these changes, so it is replaced by our own routine, which is also faster. Nice side effects of the changes include that it is now possible to use perl's "strict" pragma in a natural way in plperl, and that perl's $a and $b variables now work as expected in sort routines, and that function compilation is significantly faster. Tim Bunce and Andrew Dunstan, with reviews from Alex Hunsaker and Alexey Klyukin. Security: CVE-2010-1169		2010-05-13 16:44:03 +00:00
..
backend	Translation update	2010-05-13 07:11:54 +00:00
bin	Fix psql to not go into infinite recursion when expanding a variable that	2010-05-05 22:19:31 +00:00
corba	make sure the $Id tags are converted to $PostgreSQL as well ...	2003-11-29 22:41:33 +00:00
include	Prevent ALTER USER f RESET ALL from removing the settings that were put there	2010-03-25 14:45:51 +00:00
interfaces	Translation update	2010-05-13 07:11:54 +00:00
makefiles	Remove $(DESTDIR) from the pgxs BE_DLLLIBS= -L path for Darwin.	2006-01-19 21:20:32 +00:00
pl	Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is	2010-05-13 16:44:03 +00:00
port	tag 8.0.24, not .23	2010-03-12 03:59:00 +00:00
template	Support Sun's compiler on SunOS4 (a/k/a Solaris 9). Per ayan@ayan.net	2004-12-29 23:47:40 +00:00
test	Fix the handling of sub-SELECTs appearing in the arguments of an outer-level	2009-04-25 16:45:25 +00:00
timezone	Update time zone data files to tzdata release 2010j: DST law changes in	2010-05-11 23:02:04 +00:00
tools	Create a script to handle stamping release version numbers into files,	2008-06-10 18:09:15 +00:00
tutorial	Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,	2006-05-21 19:57:40 +00:00
utils	PostgreSQL extension makefile framework ("pgxs"), by Fabien Coelho, with	2004-07-30 12:26:40 +00:00
bcc32.mak	Add -N make flag to bcc builds from /src dir.	2005-05-13 18:13:16 +00:00
DEVELOPERS	just testing a script...	1999-07-30 03:45:57 +00:00
Makefile	Adjust src/tutorial Makefile so that it can use pgxs. This allows the	2005-01-13 18:23:22 +00:00
Makefile.global.in	Have libpgport link before libpq so that PG client applications are more	2005-03-25 18:18:41 +00:00
Makefile.shlib	Fix out-of-order inclusion of -L switches from LDFLAGS on AIX and HPUX.	2005-12-03 20:16:50 +00:00
nls-global.mk	More locale fixes for pg_ctl.	2004-06-01 03:32:42 +00:00
win32.mak	$Header: -> $PostgreSQL Changes ...	2003-11-29 19:52:15 +00:00