Re: pg_upgrade in 9.5 broken for adminpack

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: Andreas Seltenreich <seltenreich(at)gmx(dot)de>
Cc: Bruce Momjian <bruce(at)momjian(dot)us>, Jeff Janes <jeff(dot)janes(at)gmail(dot)com>, pgsql-hackers <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: pg_upgrade in 9.5 broken for adminpack
Date: 2016-01-03 21:12:16
Message-ID: 1428.1451855536@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-hackers

Andreas Seltenreich <seltenreich(at)gmx(dot)de> writes:
> Shouldn't there be some validation of arguments now that the function is
> no longer marked strict? Currently, unprivileged users can crash the
> server calling binary_upgrade_create_empty_extension with null
> arguments. Found using sqlsmith.

Good catch, thanks! Will fix.

regards, tom lane

In response to

Browse pgsql-hackers by date

  From Date Subject
Next Message Jim Nasby 2016-01-03 21:49:14 Re: count_nulls(VARIADIC "any")
Previous Message Andreas Seltenreich 2016-01-03 20:48:50 Re: pg_upgrade in 9.5 broken for adminpack