Re: Re: pgsql: Convert contrib/seg's bool-returning SQL functions to V1 call co - Mailing list pgsql-committers

From Tom Lane
Subject Re: Re: pgsql: Convert contrib/seg's bool-returning SQL functions to V1 call co
Date
Msg-id 5393.1461725984@sss.pgh.pa.us
Whole thread Raw
In response to Re: Re: pgsql: Convert contrib/seg's bool-returning SQL functions to V1 call co  (Andres Freund <andres@anarazel.de>)
Responses Re: Re: pgsql: Convert contrib/seg's bool-returning SQL functions to V1 call co
List pgsql-committers
Andres Freund <andres@anarazel.de> writes:
> I don't understand why we don't just drop V0. It makes debugging harder,
> exploitation easier (call arbitrary functions), and really has no
> features making it desirable.

What's the argument that it makes debugging harder?  Especially if
you aren't using it?

I don't particularly buy the "easier exploitation" argument, either.
You can't create a C function without superuser, and if you've got
superuser there are plenty of ways to run arbitrary code.

I'd agree that there are no desirable features that would motivate
writing new code in V0.  But that's not the reason for keeping it;
the reason for keeping it is to avoid unnecessarily breaking
existing extension code.

            regards, tom lane


pgsql-committers by date:

Previous
From: Robert Haas
Date:
Subject: pgsql: Fix pg_get_functiondef to dump parallel-safety markings.
Next
From: Andres Freund
Date:
Subject: Re: Re: pgsql: Convert contrib/seg's bool-returning SQL functions to V1 call co