diff options
| author | Noah Misch | 2019-08-05 14:48:41 +0000 |
|---|---|---|
| committer | Noah Misch | 2019-08-05 14:48:45 +0000 |
| commit | 7da46192dd7e95326d1b83a2ddcda420c1cefcae (patch) | |
| tree | b2cde0f9a603a10d8518aa75865115846e358865 /doc/src | |
| parent | 76c096bc06af053bc17be2c3ac99577cef52546a (diff) | |
Require the schema qualification in pg_temp.type_name(arg).
Commit aa27977fe21a7dfa4da4376ad66ae37cb8f0d0b5 introduced this
restriction for pg_temp.function_name(arg); do likewise for types
created in temporary schemas. Programs that this breaks should add
"pg_temp." schema qualification or switch to arg::type_name syntax.
Back-patch to 9.4 (all supported versions).
Reviewed by Tom Lane. Reported by Tom Lane.
Security: CVE-2019-10208
Diffstat (limited to 'doc/src')
| -rw-r--r-- | doc/src/sgml/config.sgml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index c485f4635db..3483ad66cd4 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -5967,6 +5967,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv; be searched <emphasis>before</> searching any of the path items. </para> + <!-- To further split hairs, funcname('foo') does not use the temporary + schema, even when it considers typname='funcname'. This paragraph + refers to function names in a loose sense, "pg_proc.proname or + func_name grammar production". --> <para> Likewise, the current session's temporary-table schema, <literal>pg_temp_<replaceable>nnn</></>, is always searched if it |