• Tom Lane's avatar
    Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside security-definer · 187e5d89
    Tom Lane authored
    functions.
    
    This extends the previous patch that forbade SETting these variables inside
    security-definer functions.  RESET is equally a security hole, since it
    would allow regaining privileges of the caller; furthermore it can trigger
    Assert failures and perhaps other internal errors, since the code is not
    expecting these variables to change in such contexts.  The previous patch
    did not cover this case because assign hooks don't really have enough
    information, so move the responsibility for preventing this into guc.c.
    
    Problem discovered by Heikki Linnakangas.
    
    Security: no CVE assigned yet, extends CVE-2007-6600
    187e5d89
variable.c 21.3 KB