diff options
| author | Alexander Korotkov <akorotkov@postgresql.org> | 2024-08-22 09:50:48 +0300 |
|---|---|---|
| committer | Alexander Korotkov <akorotkov@postgresql.org> | 2024-08-22 09:50:48 +0300 |
| commit | 04158e7fa37c2dda9c3421ca922d02807b86df19 (patch) | |
| tree | aa1c8d1d48c1336275b764418e9dcf039aefe7e2 /src/include/nodes/parsenodes.h | |
| parent | 9bb842f95ef3384f0822c386a4c569780e613e4e (diff) | |
Avoid repeated table name lookups in createPartitionTable()
Currently, createPartitionTable() opens newly created table using its name.
This approach is prone to privilege escalation attack, because we might end
up opening another table than we just created.
This commit address the issue above by opening newly created table by its
OID. It appears to be tricky to get a relation OID out of ProcessUtility().
We have to extend TableLikeClause with new newRelationOid field, which is
filled within ProcessUtility() to be further accessed by caller.
Security: CVE-2014-0062
Reported-by: Noah Misch
Discussion: https://postgr.es/m/20240808171351.a9.nmisch%40google.com
Reviewed-by: Pavel Borisov, Dmitry Koval
Diffstat (limited to 'src/include/nodes/parsenodes.h')
| -rw-r--r-- | src/include/nodes/parsenodes.h | 1 |
1 files changed, 1 insertions, 0 deletions
diff --git a/src/include/nodes/parsenodes.h b/src/include/nodes/parsenodes.h index 85a62b538e5..577c4bfef76 100644 --- a/src/include/nodes/parsenodes.h +++ b/src/include/nodes/parsenodes.h @@ -754,6 +754,7 @@ typedef struct TableLikeClause RangeVar *relation; bits32 options; /* OR of TableLikeOption flags */ Oid relationOid; /* If table has been looked up, its OID */ + Oid newRelationOid; /* OID of newly created table */ } TableLikeClause; typedef enum TableLikeOption |