pgsql: Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements - Mailing list pgsql-committers

From Michael Paquier
Subject pgsql: Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements
Date
Msg-id E1psLN6-005Jau-AG@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements

CREATE SCHEMA AUTHORIZATION with appended schema elements can lead to
crashes when comparing the schema name of the query with the schemas
used in the qualification of some clauses in the elements' queries.

The origin of the problem is that the transformation routine for the
elements listed in a CREATE SCHEMA query uses as new, expected, schema
name the one listed in CreateSchemaStmt itself.  However, depending on
the query, CreateSchemaStmt.schemaname may be NULL, being computed
instead from the role specification of the query given by the
AUTHORIZATION clause, that could be either:
- A user name string, with the new schema name being set to the same
value as the role given.
- Guessed from CURRENT_ROLE, SESSION_ROLE or CURRENT_ROLE, with a new
schema name computed from the security context where CREATE SCHEMA is
running.

Regression tests are added for CREATE SCHEMA with some appended elements
(some of them with schema qualifications), covering also some role
specification patterns.

While on it, this simplifies the context structure used during the
transformation of the elements listed in a CREATE SCHEMA query by
removing the fields for the role specification and the role type.  They
were not used, and for the role specification this could be confusing as
the schema name may by extracted from that at the beginning of
CreateSchemaCommand().

This issue exists for a long time, so backpatch down to all the versions
supported.

Reported-by: Song Hongyu
Author: Michael Paquier
Reviewed-by: Richard Guo
Discussion: https://postgr.es/m/17909-f65c12dfc5f0451d@postgresql.org
Backpatch-through: 11

Branch
------
REL_11_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/a9212716b3bfb8fa83032e5e2e11658f067d7aaf

Modified Files
--------------
src/backend/commands/schemacmds.c           |  3 +-
src/backend/parser/parse_utilcmd.c          | 38 +++++------
src/include/parser/parse_utilcmd.h          |  3 +-
src/test/regress/expected/create_schema.out | 98 +++++++++++++++++++++++++++++
src/test/regress/parallel_schedule          |  2 +-
src/test/regress/serial_schedule            |  1 +
src/test/regress/sql/create_schema.sql      | 70 +++++++++++++++++++++
7 files changed, 193 insertions(+), 22 deletions(-)


pgsql-committers by date:

Previous
From: Daniel Gustafsson
Date:
Subject: pgsql: Fix assertion failure in heap_vacuum_rel
Next
From: Tom Lane
Date:
Subject: pgsql: Handle zero-length sublist correctly in Python -> SQL array conv