]> granicus.if.org Git - postgresql/commit
Support explicit placement of the temporary-table schema within search_path.
authorTom Lane <tgl@sss.pgh.pa.us>
Fri, 20 Apr 2007 02:37:49 +0000 (02:37 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Fri, 20 Apr 2007 02:37:49 +0000 (02:37 +0000)
commitd694bdd1c9a2f4042f74fbc1f5e4e82f99aa4aac
treeb247d3ec5441bd5b6f02cb67357b758b833d1626
parent4e6c6a40e0a516fc84d7dd3f9bced47755d43361
Support explicit placement of the temporary-table schema within search_path.
This is needed to allow a security-definer function to set a truly secure
value of search_path.  Without it, a malicious user can use temporary objects
to execute code with the privileges of the security-definer function.  Even
pushing the temp schema to the back of the search path is not quite good
enough, because a function or operator at the back of the path might still
capture control from one nearer the front due to having a more exact datatype
match.  Hence, disable searching the temp schema altogether for functions and
operators.

Security: CVE-2007-2138
doc/src/sgml/config.sgml
doc/src/sgml/ref/create_function.sgml
doc/src/sgml/release.sgml
src/backend/catalog/aclchk.c
src/backend/catalog/namespace.c
src/test/regress/expected/temp.out
src/test/regress/sql/temp.sql