Tom Lane 303696c3b4 Install a data-type-based solution for protecting pg_get_expr(). ... Since the code underlying pg_get_expr() is not secure against malformed input, and can't practically be made so, we need to prevent miscreants from feeding arbitrary data to it. We can do this securely by declaring pg_get_expr() to take a new datatype "pg_node_tree" and declaring the system catalog columns that hold nodeToString output to be of that type. There is no way at SQL level to create a non-null value of type pg_node_tree. Since the backend-internal operations that fill those catalog columns operate below the SQL level, they are oblivious to the datatype relabeling and don't need any changes.		2010-09-03 01:34:55 +00:00
..
acl.c
array_userfuncs.c
arrayfuncs.c
arrayutils.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
ascii.c
bool.c
cash.c
char.c
date.c
datetime.c
datum.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
dbsize.c
domains.c	pgindent run for 9.0	2010-02-26 02:01:40 +00:00
encode.c
enum.c
float.c
format_type.c
formatting.c
genfile.c	Verify input in pg_read_file().	2010-01-05 01:29:36 +00:00
geo_ops.c
geo_selfuncs.c
inet_net_ntop.c
inet_net_pton.c
int8.c
int.c
like_match.c
like.c
lockfuncs.c
mac.c
Makefile
misc.c
nabstime.c
name.c	Update copyright for the year 2010.	2010-01-02 16:58:17 +00:00
network.c
numeric.c
numutils.c
oid.c
oracle_compat.c
pg_locale.c
pg_lzcompress.c
pgstatfuncs.c
pseudotypes.c	Install a data-type-based solution for protecting pg_get_expr().	2010-09-03 01:34:55 +00:00
quote.c
regexp.c
regproc.c
ri_triggers.c
rowtypes.c
ruleutils.c
selfuncs.c
tid.c
timestamp.c
trigfuncs.c
tsginidx.c
tsgistidx.c
tsquery_cleanup.c
tsquery_gist.c
tsquery_op.c
tsquery_rewrite.c
tsquery_util.c
tsquery.c
tsrank.c
tsvector_op.c
tsvector_parser.c
tsvector.c
txid.c
uuid.c
varbit.c
varchar.c
varlena.c
version.c
windowfuncs.c
xid.c
xml.c