Re: [GENERAL] Security implications of (plpgsql) functions - Mailing list pgsql-hackers

From Joe Conway
Subject Re: [GENERAL] Security implications of (plpgsql) functions
Date
Msg-id 3DB42DD7.3040005@joeconway.com
Whole thread Raw
In response to Re: [GENERAL] Security implications of (plpgsql) functions  (Bruce Momjian <pgman@candle.pha.pa.us>)
List pgsql-hackers
Doug McNaught wrote:
> Solved the halting problem lately?  ;)

nah -- I'll leave that as an exercise for the reader ;-)

> Someone determined to DoS could probably get around any practical
> implementation of your idea, using dummy argument, mutual recursion or
> whatever. 
> 

I see your point. I guess a max recursion limit would be the way to go. 
Probably should be a configurable setting.

Joe



pgsql-hackers by date:

Previous
From: Tom Lane
Date:
Subject: Re: autocommit vs TRUNCATE et al
Next
From: Tom Lane
Date:
Subject: Re: [GENERAL] Security implications of (plpgsql) functions