diff options
author | Noah Misch <noah@leadboat.com> | 2019-08-05 07:48:41 -0700 |
---|---|---|
committer | Noah Misch <noah@leadboat.com> | 2019-08-05 07:48:45 -0700 |
commit | 21f94c51f680cefa2ea6b0d94aa8a967a375afc6 (patch) | |
tree | ff1baabd21288b58c9fce838532df93be15cca47 /doc/src | |
parent | b0fb44eacd8f96f48d3589f1a066fdd75947b4bd (diff) |
Require the schema qualification in pg_temp.type_name(arg).
Commit aa27977fe21a7dfa4da4376ad66ae37cb8f0d0b5 introduced this
restriction for pg_temp.function_name(arg); do likewise for types
created in temporary schemas. Programs that this breaks should add
"pg_temp." schema qualification or switch to arg::type_name syntax.
Back-patch to 9.4 (all supported versions).
Reviewed by Tom Lane. Reported by Tom Lane.
Security: CVE-2019-10208
Diffstat (limited to 'doc/src')
-rw-r--r-- | doc/src/sgml/config.sgml | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/doc/src/sgml/config.sgml b/doc/src/sgml/config.sgml index 37e21e8dcb9..86a17cb6a48 100644 --- a/doc/src/sgml/config.sgml +++ b/doc/src/sgml/config.sgml @@ -6490,6 +6490,10 @@ COPY postgres_log FROM '/full/path/to/logfile.csv' WITH csv; be searched <emphasis>before</emphasis> searching any of the path items. </para> + <!-- To further split hairs, funcname('foo') does not use the temporary + schema, even when it considers typname='funcname'. This paragraph + refers to function names in a loose sense, "pg_proc.proname or + func_name grammar production". --> <para> Likewise, the current session's temporary-table schema, <literal>pg_temp_<replaceable>nnn</replaceable></literal>, is always searched if it |