Postgres Pro
Downloads
Home   >   mailing lists

Re: Performance/Security question on caching function OIDs for a connection - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Performance/Security question on caching function OIDs for a connection
Date
Msg-id 571.1161205901@sss.pgh.pa.us
Whole thread Raw
In response to Performance/Security question on caching function OIDs for a connection  (Weslee Bilodeau <weslee.bilodeau@hypermediasystems.com>)
List pgsql-hackers
Tree view 
Weslee Bilodeau <weslee.bilodeau@hypermediasystems.com> writes:
> On the input and output functions for the new type, I lookup the
> encrypt/decrypt functions using -
>     FuncnameGetCandidates( list_make1( makeString( "decrypt" ) )
> Running through the list and getting the functions OID, then calling
> with OidFunctionCall3().

Yech.  That sounds trivially crashable, just define decrypt() to do
something other than what your code is expecting....
        regards, tom lane

pgsql-hackers by date:

Previous
From: Weslee Bilodeau
Date:
Subject: Performance/Security question on caching function OIDs for a connection
Next
From: "jungmin shin"
Date:
Subject: UDF and cache