diff options
| author | Tom Lane | 2020-02-19 21:59:14 +0000 |
|---|---|---|
| committer | Tom Lane | 2020-02-19 21:59:14 +0000 |
| commit | 70a7732007bc4689f4c7a44e738eb2d892dac1e3 (patch) | |
| tree | ee0e3600986e53e6028658dbe2d1bfad3e1f7606 /src/pl | |
| parent | 2f9c46a32b43d72c9384378827ee51fde896807c (diff) | |
Remove support for upgrading extensions from "unpackaged" state.
Andres Freund pointed out that allowing non-superusers to run
"CREATE EXTENSION ... FROM unpackaged" has security risks, since
the unpackaged-to-1.0 scripts don't try to verify that the existing
objects they're modifying are what they expect. Just attaching such
objects to an extension doesn't seem too dangerous, but some of them
do more than that.
We could have resolved this, perhaps, by still requiring superuser
privilege to use the FROM option. However, it's fair to ask just what
we're accomplishing by continuing to lug the unpackaged-to-1.0 scripts
forward. None of them have received any real testing since 9.1 days,
so they may not even work anymore (even assuming that one could still
load the previous "loose" object definitions into a v13 database).
And an installation that's trying to go from pre-9.1 to v13 or later
in one jump is going to have worse compatibility problems than whether
there's a trivial way to convert their contrib modules into extension
style.
Hence, let's just drop both those scripts and the core-code support
for "CREATE EXTENSION ... FROM".
Discussion: https://postgr.es/m/20200213233015.r6rnubcvl4egdh5r@alap3.anarazel.de
Diffstat (limited to 'src/pl')
| -rw-r--r-- | src/pl/plperl/GNUmakefile | 4 | ||||
| -rw-r--r-- | src/pl/plperl/plperl--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/plperl/plperlu--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/plpgsql/src/Makefile | 2 | ||||
| -rw-r--r-- | src/pl/plpgsql/src/plpgsql--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/plpython/Makefile | 4 | ||||
| -rw-r--r-- | src/pl/plpython/plpython2u--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/plpython/plpython3u--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/plpython/plpythonu--unpackaged--1.0.sql | 7 | ||||
| -rw-r--r-- | src/pl/tcl/Makefile | 4 | ||||
| -rw-r--r-- | src/pl/tcl/pltcl--unpackaged--1.0.sql | 5 | ||||
| -rw-r--r-- | src/pl/tcl/pltclu--unpackaged--1.0.sql | 5 |
12 files changed, 7 insertions, 59 deletions
diff --git a/src/pl/plperl/GNUmakefile b/src/pl/plperl/GNUmakefile index e4d0a0bf32e..919d46453f6 100644 --- a/src/pl/plperl/GNUmakefile +++ b/src/pl/plperl/GNUmakefile @@ -27,8 +27,8 @@ NAME = plperl OBJS = plperl.o SPI.o Util.o $(WIN32RES) -DATA = plperl.control plperl--1.0.sql plperl--unpackaged--1.0.sql \ - plperlu.control plperlu--1.0.sql plperlu--unpackaged--1.0.sql +DATA = plperl.control plperl--1.0.sql \ + plperlu.control plperlu--1.0.sql PERLCHUNKS = plc_perlboot.pl plc_trusted.pl diff --git a/src/pl/plperl/plperl--unpackaged--1.0.sql b/src/pl/plperl/plperl--unpackaged--1.0.sql deleted file mode 100644 index 5e097c443db..00000000000 --- a/src/pl/plperl/plperl--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plperl/plperl--unpackaged--1.0.sql */ - -ALTER EXTENSION plperl ADD LANGUAGE plperl; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plperl ADD FUNCTION plperl_call_handler(); -ALTER EXTENSION plperl ADD FUNCTION plperl_inline_handler(internal); -ALTER EXTENSION plperl ADD FUNCTION plperl_validator(oid); diff --git a/src/pl/plperl/plperlu--unpackaged--1.0.sql b/src/pl/plperl/plperlu--unpackaged--1.0.sql deleted file mode 100644 index 36de1ddf49e..00000000000 --- a/src/pl/plperl/plperlu--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plperl/plperlu--unpackaged--1.0.sql */ - -ALTER EXTENSION plperlu ADD LANGUAGE plperlu; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plperlu ADD FUNCTION plperlu_call_handler(); -ALTER EXTENSION plperlu ADD FUNCTION plperlu_inline_handler(internal); -ALTER EXTENSION plperlu ADD FUNCTION plperlu_validator(oid); diff --git a/src/pl/plpgsql/src/Makefile b/src/pl/plpgsql/src/Makefile index 0efa1caae23..70a9c34367f 100644 --- a/src/pl/plpgsql/src/Makefile +++ b/src/pl/plpgsql/src/Makefile @@ -28,7 +28,7 @@ OBJS = \ pl_handler.o \ pl_scanner.o -DATA = plpgsql.control plpgsql--1.0.sql plpgsql--unpackaged--1.0.sql +DATA = plpgsql.control plpgsql--1.0.sql REGRESS_OPTS = --dbname=$(PL_TESTDB) diff --git a/src/pl/plpgsql/src/plpgsql--unpackaged--1.0.sql b/src/pl/plpgsql/src/plpgsql--unpackaged--1.0.sql deleted file mode 100644 index 15a74f091d6..00000000000 --- a/src/pl/plpgsql/src/plpgsql--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plpgsql/src/plpgsql--unpackaged--1.0.sql */ - -ALTER EXTENSION plpgsql ADD LANGUAGE plpgsql; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plpgsql ADD FUNCTION plpgsql_call_handler(); -ALTER EXTENSION plpgsql ADD FUNCTION plpgsql_inline_handler(internal); -ALTER EXTENSION plpgsql ADD FUNCTION plpgsql_validator(oid); diff --git a/src/pl/plpython/Makefile b/src/pl/plpython/Makefile index 0d53d3d7707..9e95285af89 100644 --- a/src/pl/plpython/Makefile +++ b/src/pl/plpython/Makefile @@ -34,9 +34,9 @@ OBJS = \ plpy_typeio.o \ plpy_util.o -DATA = $(NAME)u.control $(NAME)u--1.0.sql $(NAME)u--unpackaged--1.0.sql +DATA = $(NAME)u.control $(NAME)u--1.0.sql ifeq ($(python_majorversion),2) -DATA += plpythonu.control plpythonu--1.0.sql plpythonu--unpackaged--1.0.sql +DATA += plpythonu.control plpythonu--1.0.sql endif # header files to install - it's not clear which of these might be needed diff --git a/src/pl/plpython/plpython2u--unpackaged--1.0.sql b/src/pl/plpython/plpython2u--unpackaged--1.0.sql deleted file mode 100644 index 6efa2dbad93..00000000000 --- a/src/pl/plpython/plpython2u--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plpython/plpython2u--unpackaged--1.0.sql */ - -ALTER EXTENSION plpython2u ADD LANGUAGE plpython2u; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plpython2u ADD FUNCTION plpython2_call_handler(); -ALTER EXTENSION plpython2u ADD FUNCTION plpython2_inline_handler(internal); -ALTER EXTENSION plpython2u ADD FUNCTION plpython2_validator(oid); diff --git a/src/pl/plpython/plpython3u--unpackaged--1.0.sql b/src/pl/plpython/plpython3u--unpackaged--1.0.sql deleted file mode 100644 index fb8d3d6a652..00000000000 --- a/src/pl/plpython/plpython3u--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plpython/plpython3u--unpackaged--1.0.sql */ - -ALTER EXTENSION plpython3u ADD LANGUAGE plpython3u; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plpython3u ADD FUNCTION plpython3_call_handler(); -ALTER EXTENSION plpython3u ADD FUNCTION plpython3_inline_handler(internal); -ALTER EXTENSION plpython3u ADD FUNCTION plpython3_validator(oid); diff --git a/src/pl/plpython/plpythonu--unpackaged--1.0.sql b/src/pl/plpython/plpythonu--unpackaged--1.0.sql deleted file mode 100644 index 16b828f2fed..00000000000 --- a/src/pl/plpython/plpythonu--unpackaged--1.0.sql +++ /dev/null @@ -1,7 +0,0 @@ -/* src/pl/plpython/plpythonu--unpackaged--1.0.sql */ - -ALTER EXTENSION plpythonu ADD LANGUAGE plpythonu; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION plpythonu ADD FUNCTION plpython_call_handler(); -ALTER EXTENSION plpythonu ADD FUNCTION plpython_inline_handler(internal); -ALTER EXTENSION plpythonu ADD FUNCTION plpython_validator(oid); diff --git a/src/pl/tcl/Makefile b/src/pl/tcl/Makefile index 9e315dee6a7..1e7740da3fb 100644 --- a/src/pl/tcl/Makefile +++ b/src/pl/tcl/Makefile @@ -26,8 +26,8 @@ OBJS = \ $(WIN32RES) \ pltcl.o -DATA = pltcl.control pltcl--1.0.sql pltcl--unpackaged--1.0.sql \ - pltclu.control pltclu--1.0.sql pltclu--unpackaged--1.0.sql +DATA = pltcl.control pltcl--1.0.sql \ + pltclu.control pltclu--1.0.sql REGRESS_OPTS = --dbname=$(PL_TESTDB) --load-extension=pltcl REGRESS = pltcl_setup pltcl_queries pltcl_trigger pltcl_call pltcl_start_proc pltcl_subxact pltcl_unicode pltcl_transaction diff --git a/src/pl/tcl/pltcl--unpackaged--1.0.sql b/src/pl/tcl/pltcl--unpackaged--1.0.sql deleted file mode 100644 index 294125892af..00000000000 --- a/src/pl/tcl/pltcl--unpackaged--1.0.sql +++ /dev/null @@ -1,5 +0,0 @@ -/* src/pl/tcl/pltcl--unpackaged--1.0.sql */ - -ALTER EXTENSION pltcl ADD LANGUAGE pltcl; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION pltcl ADD FUNCTION pltcl_call_handler(); diff --git a/src/pl/tcl/pltclu--unpackaged--1.0.sql b/src/pl/tcl/pltclu--unpackaged--1.0.sql deleted file mode 100644 index dac18f8d87b..00000000000 --- a/src/pl/tcl/pltclu--unpackaged--1.0.sql +++ /dev/null @@ -1,5 +0,0 @@ -/* src/pl/tcl/pltclu--unpackaged--1.0.sql */ - -ALTER EXTENSION pltclu ADD LANGUAGE pltclu; --- ALTER ADD LANGUAGE doesn't pick up the support functions, so we have to. -ALTER EXTENSION pltclu ADD FUNCTION pltclu_call_handler(); |
