diff options
| author | Noah Misch | 2019-08-05 14:48:41 +0000 |
|---|---|---|
| committer | Noah Misch | 2019-08-05 14:48:45 +0000 |
| commit | 752fa3dbfc36c70a692986b56daac41410fca3f6 (patch) | |
| tree | 57569a9b106aa92376f0a11b2a23ac506a10f192 /doc/src | |
| parent | 0e9e7e28902ca0a01b0d36cbdd155abe4ea63cfe (diff) | |
Require the schema qualification in pg_temp.type_name(arg).
Commit aa27977fe21a7dfa4da4376ad66ae37cb8f0d0b5 introduced this
restriction for pg_temp.function_name(arg); do likewise for types
created in temporary schemas. Programs that this breaks should add
"pg_temp." schema qualification or switch to arg::type_name syntax.
Back-patch to 9.4 (all supported versions).
Reviewed by Tom Lane. Reported by Tom Lane.
Security: CVE-2019-10208
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/config.sgml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index 66b331bce2b..9aa1e83ecfc 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -5524,6 +5524,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv; be searched <emphasis>before</> searching any of the path items. </para> + <!-- To further split hairs, funcname('foo') does not use the temporary + schema, even when it considers typname='funcname'. This paragraph + refers to function names in a loose sense, "pg_proc.proname or + func_name grammar production". --> <para> Likewise, the current session's temporary-table schema, <literal>pg_temp_<replaceable>nnn</></>, is always searched if it |