From 64a42a2af8df2e325a23bf0381966ada0fe0a4bd Mon Sep 17 00:00:00 2001 From: Andrew Dunstan Date: Thu, 13 May 2010 16:43:14 +0000 Subject: Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is fundamentally insecure. Instead apply an opmask to the whole interpreter that imposes restrictions on unsafe operations. These restrictions are much harder to subvert than is Safe.pm, since there is no container to be broken out of. Backported to release 7.4. In releases 7.4, 8.0 and 8.1 this also includes the necessary backporting of the two interpreters model for plperl and plperlu adopted in release 8.2. In versions 8.0 and up, the use of Perl's POSIX module to undo its locale mangling on Windows has become insecure with these changes, so it is replaced by our own routine, which is also faster. Nice side effects of the changes include that it is now possible to use perl's "strict" pragma in a natural way in plperl, and that perl's $a and $b variables now work as expected in sort routines, and that function compilation is significantly faster. Tim Bunce and Andrew Dunstan, with reviews from Alex Hunsaker and Alexey Klyukin. Security: CVE-2010-1169 --- doc/src/sgml/plperl.sgml | 9 ++------- 1 file changed, 2 insertions(+), 7 deletions(-) (limited to 'doc/src') diff --git a/doc/src/sgml/plperl.sgml b/doc/src/sgml/plperl.sgml index 741e4ba2a7c..cbad1a48ea6 100644 --- a/doc/src/sgml/plperl.sgml +++ b/doc/src/sgml/plperl.sgml @@ -1,4 +1,4 @@ - + PL/Perl - Perl Procedural Language @@ -263,12 +263,7 @@ SELECT * FROM perl_set(); use strict; - in the function body. But this only works in PL/PerlU - functions, since use is not a trusted operation. In - PL/Perl functions you can instead do - -BEGIN { strict->import(); } - + in the function body. -- cgit v1.2.3