diff options
| author | Tom Lane <tgl@sss.pgh.pa.us> | 2010-09-25 15:57:05 -0400 |
|---|---|---|
| committer | Tom Lane <tgl@sss.pgh.pa.us> | 2010-09-25 16:02:32 -0400 |
| commit | 78b0a0d8c026d20788b584266c2aef5f5add16b2 (patch) | |
| tree | 6968a1fb0fd8999115904b265049e4ae86ba3425 /src/backend/access/gist/gistscan.c | |
| parent | 76833aeab9f12768204078eedeac4e539986ac07 (diff) | |
| download | postgresql-78b0a0d8c026d20788b584266c2aef5f5add16b2.tar.gz postgresql-78b0a0d8c026d20788b584266c2aef5f5add16b2.zip | |
Further fixes to the pg_get_expr() security fix in back branches.
It now emerges that the JDBC driver expects to be able to use pg_get_expr()
on an output of a sub-SELECT. So extend the check logic to be able to recurse
into a sub-SELECT to see if the argument is ultimately coming from an
appropriate column. Per report from Thomas Kellerer.
Diffstat (limited to 'src/backend/access/gist/gistscan.c')
0 files changed, 0 insertions, 0 deletions