diff options
| author | Tom Lane | 2004-11-16 22:05:22 +0000 |
|---|---|---|
| committer | Tom Lane | 2004-11-16 22:05:22 +0000 |
| commit | 4a0bee976cb8dfdb674b5a95435cbc5ffa4006aa (patch) | |
| tree | fdaeb23d2bbdb13fdbacdb5da266c38ea5e03fe7 /src/pl | |
| parent | bb85f1b9b13f0a94e782c3ada9e21aa1ba98cc7a (diff) | |
Adjust safety restrictions for plperl functions. Andrew Dunstan's
patch, but allow srand and disallow sprintf as per subsequent discussion.
Diffstat (limited to 'src/pl')
| -rw-r--r-- | src/pl/plperl/plperl.c | 15 |
1 files changed, 9 insertions, 6 deletions
diff --git a/src/pl/plperl/plperl.c b/src/pl/plperl/plperl.c index 3e3e4cc5ee..8800fb4f64 100644 --- a/src/pl/plperl/plperl.c +++ b/src/pl/plperl/plperl.c @@ -33,7 +33,7 @@ * ENHANCEMENTS, OR MODIFICATIONS. * * IDENTIFICATION - * $PostgreSQL: pgsql/src/pl/plperl/plperl.c,v 1.55 2004/10/15 17:08:26 momjian Exp $ + * $PostgreSQL: pgsql/src/pl/plperl/plperl.c,v 1.56 2004/11/16 22:05:22 tgl Exp $ * **********************************************************************/ @@ -250,17 +250,20 @@ plperl_safe_init(void) static char *safe_ok = "use vars qw($PLContainer); $PLContainer = new Safe('PLPerl');" - "$PLContainer->permit_only(':default');$PLContainer->permit(':base_math');" - "$PLContainer->share(qw[&elog &spi_exec_query &DEBUG &LOG &INFO &NOTICE &WARNING &ERROR %SHARED ]);" + "$PLContainer->permit_only(':default');" + "$PLContainer->permit(qw[:base_math !:base_io sort time]);" + "$PLContainer->share(qw[&elog &spi_exec_query &DEBUG &LOG " + "&INFO &NOTICE &WARNING &ERROR %SHARED ]);" "sub ::mksafefunc { return $PLContainer->reval(qq[sub { $_[0] $_[1]}]); }" ; static char *safe_bad = "use vars qw($PLContainer); $PLContainer = new Safe('PLPerl');" - "$PLContainer->permit_only(':default');$PLContainer->permit(':base_math');" - "$PLContainer->share(qw[&elog &DEBUG &LOG &INFO &NOTICE &WARNING &ERROR %SHARED ]);" + "$PLContainer->permit_only(':default');" + "$PLContainer->share(qw[&elog &ERROR ]);" "sub ::mksafefunc { return $PLContainer->reval(qq[sub { " - "elog(ERROR,'trusted perl functions disabled - please upgrade perl Safe module to at least 2.09');}]); }" + "elog(ERROR,'trusted perl functions disabled - " + "please upgrade perl Safe module to at least 2.09');}]); }" ; SV *res; |