Thread: pgsql: Don't pass strings directly to errdetail() and errhint() - use %s

pgsql: Don't pass strings directly to errdetail() and errhint() - use %s

From

mha@postgresql.org (Magnus Hagander)

Date:

20 November 2008, 14:36:31

Log Message:
-----------
Don't pass strings directly to errdetail() and errhint() - use
%s to unescape them. Fixes a potential security issue (in as yet
unreleased code)

Modified Files:
--------------
    pgsql/src/pl/plpgsql/src:
        pl_exec.c (r1.224 -> r1.225)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/pl/plpgsql/src/pl_exec.c?r1=1.224&r2=1.225)