Re: Binary support for pgoutput plugin - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Binary support for pgoutput plugin
Date
Msg-id 3029175.1594780128@sss.pgh.pa.us
Whole thread Raw
In response to Re: Binary support for pgoutput plugin  (Andres Freund <andres@anarazel.de>)
Responses Re: Binary support for pgoutput plugin  (Andres Freund <andres@anarazel.de>)
List pgsql-hackers
Andres Freund <andres@anarazel.de> writes:
> What is the gain in having these checks? recv functions need to be safe
> against arbitrary input, so a type crosscheck doesn't buy additional
> safety in that regard. Not that a potential attacker couldn't just
> change the content anyways?

You're confusing security issues with user-friendliness issues.
Detecting that you sent the wrong type via an OID mismatch error
is a lot less painful than trying to figure out why you've got
errors along the line of "incorrect binary data format".

            regards, tom lane



pgsql-hackers by date:

Previous
From: Nikita Glukhov
Date:
Subject: Re: SQL/JSON: functions
Next
From: Amit Langote
Date:
Subject: Re: [PATCH] Performance Improvement For Copy From Binary Files