Re: [BUG] SECURITY DEFINER on call handler makes daemon crash - Mailing list pgsql-hackers

From Tom Lane
Subject Re: [BUG] SECURITY DEFINER on call handler makes daemon crash
Date
Msg-id 25179.1269043873@sss.pgh.pa.us
Whole thread Raw
In response to Re: [BUG] SECURITY DEFINER on call handler makes daemon crash  (Robert Haas <robertmhaas@gmail.com>)
Responses Re: [BUG] SECURITY DEFINER on call handler makes daemon crash
List pgsql-hackers
Robert Haas <robertmhaas@gmail.com> writes:
> On Fri, Mar 19, 2010 at 8:18 AM, Tom Lane <tgl@sss.pgh.pa.us> wrote:
>> KaiGai Kohei <kaigai@ak.jp.nec.com> writes:
>>> When we assign "SECURITY DEFINER" attribute on plpgsql_call_handler(),
>>> it makes server process crashed.
>> 
>> So don't do that. �Whatever possessed you to think that's a sensible
>> idea anyway?

> It might not be sensible, but the whole server going down as a result
> doesn't seem very sensible either.

[ shrug... ]  If you would like to start enumerating the ways in which
you can crash the server with erroneous pg_proc entries for C functions,
go for it.  It'll keep you out of trouble for a very long time.
        regards, tom lane


pgsql-hackers by date:

Previous
From: Robert Haas
Date:
Subject: Re: C libpq frontend library fetchsize
Next
From: Robert Haas
Date:
Subject: Re: [BUG] SECURITY DEFINER on call handler makes daemon crash