diff options
author | Noah Misch <noah@leadboat.com> | 2025-09-29 11:15:44 -0700 |
---|---|---|
committer | Noah Misch <noah@leadboat.com> | 2025-09-29 11:15:49 -0700 |
commit | afb2cce743d4455f9ef88373cffcdadaf0600352 (patch) | |
tree | e483d07a16b301b4fea9e03901c1f8653b436b14 /src/include/postgres.h | |
parent | a4dbb11bb9acf9b97994ef278a368744aee01147 (diff) |
Fix StatisticsObjIsVisibleExt() for pg_temp.
Neighbor get_statistics_object_oid() ignores objects in pg_temp, as has
been the standard for non-relation, non-type namespace searches since
CVE-2007-2138. Hence, most operations that name a statistics object
correctly decline to map an unqualified name to a statistics object in
pg_temp. StatisticsObjIsVisibleExt() did not. Consequently,
pg_statistics_obj_is_visible() wrongly returned true for such objects,
psql \dX wrongly listed them, and getObjectDescription()-based ereport()
and pg_describe_object() wrongly omitted namespace qualification. Any
malfunction beyond that would depend on how a human or application acts
on those wrong indications. Commit
d99d58cdc8c0b5b50ee92995e8575c100b1a458a introduced this. Back-patch to
v13 (all supported versions).
Reviewed-by: Nathan Bossart <nathandbossart@gmail.com>
Discussion: https://postgr.es/m/20250920162116.2e.nmisch@google.com
Backpatch-through: 13
Diffstat (limited to 'src/include/postgres.h')
0 files changed, 0 insertions, 0 deletions