Thanks a lot for explanation.
I'm planing to upgrade to pgsql 9.2 even for other reasons.
If I need to use earlier postgresql versions I'll fix my functions using
a text arguments instead of xml one.
I tried and It seams to work fine.
Regards
Franco Ricci
On 7-10-2012 7:06 PM, Tom Lane wrote:
> franco.ricci@phys.uniroma1.it writes:
>> I wrote the following function in Perl to make some operations with LLRP
>> command in a RFID application:
>> ----
>> CREATE OR REPLACE FUNCTION llrp_command.llrpenc_bytea(xml)
>> RETURNS bytea AS
>> $BODY$
>> use strict;
>> use RFID::LLRP::Builder qw(encode_message);
> I don't know anything about RFID::LLRP::Builder, but some quick googling
> suggests that it accesses libxml2 under the hood. If so, and if it
> relies on being able to fetch external entities, you're going to need to
> use PG 9.2 to make this work. The fix for CVE-2012-3489 broke such
> cases in earlier branches. Sorry about that, but the alternatives were
> worse; and in any case, pre-9.2 versions never made any serious effort
> to allow other uses of libxml2 inside the backend. It's mostly luck
> that it worked for you before, I think.
>
> regards, tom lane
>
--
Franco Ricci
LabIT
Sviluppo Servizi Informatici
Dipartimento di Fisica
Università di Roma "La Sapienza"
Piazzale Aldo Moro, 5
00185
Roma
Italy
tel +390649913449
fax +39064463158
