diff options
| author | Nathan Bossart | 2024-11-11 15:00:00 +0000 |
|---|---|---|
| committer | Nathan Bossart | 2024-11-11 15:00:00 +0000 |
| commit | cd7ab57532bb4fbf2e636b1f7d132e6e2d9ac5fc (patch) | |
| tree | 9722b0b38892c6de219423fa25bf7e9bdc946fd4 /src/tools | |
| parent | b7e3a52a877cffb42ec7208232e30a8e44231e01 (diff) | |
Ensure cached plans are correctly marked as dependent on role.
If a CTE, subquery, sublink, security invoker view, or coercion
projection references a table with row-level security policies, we
neglected to mark the plan as potentially dependent on which role
is executing it. This could lead to later executions in the same
session returning or hiding rows that should have been hidden or
returned instead.
Reported-by: Wolfgang Walther
Reviewed-by: Noah Misch
Security: CVE-2024-10976
Backpatch-through: 12
Diffstat (limited to 'src/tools')
| -rw-r--r-- | src/tools/pgindent/typedefs.list | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/tools/pgindent/typedefs.list b/src/tools/pgindent/typedefs.list index 1847bbfa95c..100afe40e1d 100644 --- a/src/tools/pgindent/typedefs.list +++ b/src/tools/pgindent/typedefs.list @@ -3473,6 +3473,7 @@ fill_string_relopt finalize_primnode_context find_dependent_phvs_context find_expr_references_context +fireRIRonSubLink_context fix_join_expr_context fix_scan_expr_context fix_upper_expr_context |