]> git.ipfire.org Git - thirdparty/postgresql.git/commit
projects / thirdparty / postgresql.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 48ca290) | patch
In REFRESH MATERIALIZED VIEW, set user ID before running user code.
authorNoah Misch <noah@leadboat.com>
Mon, 9 May 2022 15:35:08 +0000 (08:35 -0700)
committerNoah Misch <noah@leadboat.com>
Mon, 9 May 2022 15:35:13 +0000 (08:35 -0700)
commit34ff15660b4f752e3941d661c3896fd96b1571f9
treeb26c1c96266481ce8b1b6f1d4667e2403bc0e680tree
parent48ca2904c11d4293ec0bed1625259b2e4ef550cccommit | diff
In REFRESH MATERIALIZED VIEW, set user ID before running user code.

It intended to, but did not, achieve this.  Adopt the new standard of
setting user ID just after locking the relation.  Back-patch to v10 (all
supported versions).

Reviewed by Simon Riggs.  Reported by Alvaro Herrera.

Security: CVE-2022-1552
src/backend/commands/matview.c diff | blob | blame | history
src/test/regress/expected/privileges.out diff | blob | blame | history
src/test/regress/sql/privileges.sql diff | blob | blame | history
Mirror of https://git.postgresql.org/git/postgresql.git