1. 14 Jan, 2006 3 commits
  2. 13 Jan, 2006 3 commits
    • Tom Lane's avatar
      Remove logic in XactLockTableWait() that attempted to mark a crashed · 39fc1fb0
      Tom Lane authored
      transaction as aborted.  Since we only call XactLockTableWait on XIDs
      that we believe to be currently running, the odds of this code ever
      actually firing are minimal.  It's certainly unnecessary, since a
      transaction that's not either running or committed will be presumed
      aborted anyway.  What's more, it's not hard to imagine scenarios where
      this could result in corrupting pg_clog: for instance, if a bogus XID
      somehow got passed to XactLockTableWait.  I think the code probably
      dates from the ancient era when we didn't have TransactionIdIsInProgress;
      back then it may have been necessary, but now I think it's a waste of
      cycles and potentially dangerous.  Per discussion with Qingqing Zhou
      and Karsten Hilbert.
      39fc1fb0
    • Tom Lane's avatar
      Document that CREATE OPERATOR CLASS amounts to granting public execute · 7d6d02b6
      Tom Lane authored
      permissions on the functions and operators contained in the opclass.
      Since we already require superuser privilege to create an operator class,
      there's no expansion-of-privilege hazard here, but if someone were to get
      the idea of building an opclass containing functions that need security
      restrictions, we'd better warn them off.  Also, change the permission
      checks from have-execute-privilege to have-ownership, and then comment
      them all out since they're dead code anyway under the superuser restriction.
      7d6d02b6
    • Tom Lane's avatar
      Require the issuer of CREATE TYPE to own the functions mentioned in the · 1564e92c
      Tom Lane authored
      type definition.  Because use of a type's I/O conversion functions isn't
      access-checked, CREATE TYPE amounts to granting public execute permissions
      on the functions, and so allowing it to anybody means that someone could
      theoretically gain access to a function he's not supposed to be able to
      execute.  The parameter-type restrictions already enforced by CREATE TYPE
      make it fairly unlikely that this oversight is meaningful in practice,
      but still it seems like a good idea to plug the hole going forward.
      Also, document the implicit grant just in case anybody gets the idea of
      building I/O functions that might need security restrictions.
      1564e92c
  3. 12 Jan, 2006 6 commits
  4. 11 Jan, 2006 7 commits
  5. 10 Jan, 2006 5 commits
    • Tom Lane's avatar
    • Neil Conway's avatar
      Minor code clarity improvement: AFAICS, estate.eval_econtext must be · 8ea91ba1
      Neil Conway authored
      non-NULL during the guts of plpgsql_exec_trigger() and
      plpgsql_exec_function(). Therefore, we can remove the NULL check,
      per discussion on -patches.
      8ea91ba1
    • Tom Lane's avatar
      Improve patternsel() by applying the operator itself to each value · ce8fd39e
      Tom Lane authored
      listed in the column's most-common-values statistics entry.  This gives
      us an exact selectivity result for the portion of the column population
      represented by the MCV list, which can be a big leg up in accuracy if
      that's a large fraction of the population.  The heuristics involving
      pattern contents and prefix are applied only to the part of the population
      not included in the MCV list.
      ce8fd39e
    • Andrew Dunstan's avatar
      · ad24b8e6
      Andrew Dunstan authored
      remove unneeded defines for uid_t and gid_t, which conflict with perl's typedefs.
      ad24b8e6
    • Neil Conway's avatar
      In PLy_function_build_args(), the code loops repeatedly, constructing · c08c8529
      Neil Conway authored
      one argument at a time and then inserting the argument into a Python
      list via PyList_SetItem(). This "steals" the reference to the argument:
      that is, the reference to the new list member is now held by the Python
      list itself. This works fine, except if an elog occurs. This causes the
      function's PG_CATCH() block to be invoked, which decrements the
      reference counts on both the current argument and the list of arguments.
      If the elog happens to occur during the second or subsequent iteration
      of the loop, the reference count on the current argument will be
      decremented twice.
      
      The fix is simple: set the local pointer to the current argument to NULL
      immediately after adding it to the argument list. This ensures that the
      Py_XDECREF() in the PG_CATCH() block doesn't double-decrement.
      c08c8529
  6. 09 Jan, 2006 4 commits
  7. 08 Jan, 2006 5 commits
    • Andrew Dunstan's avatar
      · 9bb76d0b
      Andrew Dunstan authored
      Rationalise perl header inclusions via a common include file, which also
      declares routines in plperl.c and spi_internal.c used in other files.
      
      Along the way, also stop perl from hijacking stdio and other stuff on Windows.
      9bb76d0b
    • Tom Lane's avatar
      Fix the assert_enabled issue properly. This eliminates the former ABI · 2645cb54
      Tom Lane authored
      difference between USE_ASSERT_CHECKING and not: the assert_enabled
      variable is always there.
      2645cb54
    • Tom Lane's avatar
      Recent patch broke guc.c for non-USE_ASSERT_CHECKING case. Per · cbf39930
      Tom Lane authored
      Stefan Kaltenbrunner.
      cbf39930
    • Tom Lane's avatar
      Avoid leaking memory while reading toasted entries from pg_rewrite, · edfbd074
      Tom Lane authored
      and nail a couple more system indexes into cache.  This doesn't make
      any difference in normal system operation, but when forcing constant
      cache resets it's difficult to get through the rules regression test
      without these changes.
      edfbd074
    • Neil Conway's avatar
      Add a new system view, pg_prepared_statements, that can be used to · 44b928e8
      Neil Conway authored
      access information about the prepared statements that are available
      in the current session. Original patch from Joachim Wieland, various
      improvements by Neil Conway.
      
      The "statement" column of the view contains the literal query string
      sent by the client, without any rewriting or pretty printing. This
      means that prepared statements created via SQL will be prefixed with
      "PREPARE ... AS ", whereas those prepared via the FE/BE protocol will
      not. That is unfortunate, but discussion on -patches did not yield an
      efficient way to improve this, and there is some merit in returning
      exactly what the client sent to the backend.
      
      Catalog version bumped, regression tests updated.
      44b928e8
  8. 07 Jan, 2006 3 commits
  9. 06 Jan, 2006 4 commits