Thread: pgsql: Prevent the injection of invalidly encoded strings by PL/Python

pgsql: Prevent the injection of invalidly encoded strings by PL/Python

From

petere@postgresql.org (Peter Eisentraut)

Date:

18 March 2010, 19:43:15

Log Message:
-----------
Prevent the injection of invalidly encoded strings by PL/Python into PostgreSQL
with a few strategically placed pg_verifymbstr calls.

Modified Files:
--------------
    pgsql/doc/src/sgml:
        plpython.sgml (r1.45 -> r1.46)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/doc/src/sgml/plpython.sgml?r1=1.45&r2=1.46)
    pgsql/src/pl/plpython:
        plpython.c (r1.140 -> r1.141)
        (http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/pl/plpython/plpython.c?r1=1.140&r2=1.141)

Re: pgsql: Prevent the injection of invalidly encoded strings by PL/Python

From

Andrew Dunstan

Date:

19 March 2010, 15:51:09


Peter Eisentraut wrote:
> Log Message:
> -----------
> Prevent the injection of invalidly encoded strings by PL/Python into PostgreSQL
> with a few strategically placed pg_verifymbstr calls.
>
>
>

Awesome. Do we need to fix pltcl too?

cheers

andrew