Re: Side effect of CVE-2017-7484 fix? - Mailing list pgsql-hackers

From Tom Lane
Subject Re: Side effect of CVE-2017-7484 fix?
Date
Msg-id 82920.1540216004@sss.pgh.pa.us
Whole thread Raw
In response to Side effect of CVE-2017-7484 fix?  (Dilip Kumar <dilipbalaut@gmail.com>)
Responses Re: Side effect of CVE-2017-7484 fix?  (Dilip Kumar <dilipbalaut@gmail.com>)
Re: Side effect of CVE-2017-7484 fix?  (Robert Haas <robertmhaas@gmail.com>)
List pgsql-hackers
Dilip Kumar <dilipbalaut@gmail.com> writes:
> As part of the security fix
> (e2d4ef8de869c57e3bf270a30c12d48c2ce4e00c), we have restricted the
> users from accessing the statistics of the table if the user doesn't
> have privileges on the table and the function is not leakproof.  Now,
> as a side effect of this, if the user has the privileges on the root
> partitioned table but does not have privilege on the child tables, the
> user will be able to access the data of the child table but it won't
> be able to access the statistics of the child table. This may result
> in a bad plan.

This was complained of already,
https://www.postgresql.org/message-id/flat/3876.1531261875%40sss.pgh.pa.us

            regards, tom lane


pgsql-hackers by date:

Previous
From: Dilip Kumar
Date:
Subject: Re: Side effect of CVE-2017-7484 fix?
Next
From: Amit Langote
Date:
Subject: Re: CVE-2017-7484-induced bugs, or, btree cmp functions are not leakproof?