pgsql: Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements

Поиск
Список
Период
Сортировка
От Michael Paquier
Тема pgsql: Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements
Дата
Msg-id E1psLN6-005Jar-9t@gemulon.postgresql.org
обсуждение исходный текст
Список pgsql-committers
Fix crashes with CREATE SCHEMA AUTHORIZATION and schema elements

CREATE SCHEMA AUTHORIZATION with appended schema elements can lead to
crashes when comparing the schema name of the query with the schemas
used in the qualification of some clauses in the elements' queries.

The origin of the problem is that the transformation routine for the
elements listed in a CREATE SCHEMA query uses as new, expected, schema
name the one listed in CreateSchemaStmt itself.  However, depending on
the query, CreateSchemaStmt.schemaname may be NULL, being computed
instead from the role specification of the query given by the
AUTHORIZATION clause, that could be either:
- A user name string, with the new schema name being set to the same
value as the role given.
- Guessed from CURRENT_ROLE, SESSION_ROLE or CURRENT_ROLE, with a new
schema name computed from the security context where CREATE SCHEMA is
running.

Regression tests are added for CREATE SCHEMA with some appended elements
(some of them with schema qualifications), covering also some role
specification patterns.

While on it, this simplifies the context structure used during the
transformation of the elements listed in a CREATE SCHEMA query by
removing the fields for the role specification and the role type.  They
were not used, and for the role specification this could be confusing as
the schema name may by extracted from that at the beginning of
CreateSchemaCommand().

This issue exists for a long time, so backpatch down to all the versions
supported.

Reported-by: Song Hongyu
Author: Michael Paquier
Reviewed-by: Richard Guo
Discussion: https://postgr.es/m/17909-f65c12dfc5f0451d@postgresql.org
Backpatch-through: 11

Branch
------
REL_12_STABLE

Details
-------
https://git.postgresql.org/pg/commitdiff/63f7e91ecf9fd21d6e4d4427787fef04585961fe

Modified Files
--------------
src/backend/commands/schemacmds.c           |  3 +-
src/backend/parser/parse_utilcmd.c          | 38 +++++------
src/include/parser/parse_utilcmd.h          |  3 +-
src/test/regress/expected/create_schema.out | 98 +++++++++++++++++++++++++++++
src/test/regress/parallel_schedule          |  2 +-
src/test/regress/serial_schedule            |  1 +
src/test/regress/sql/create_schema.sql      | 70 +++++++++++++++++++++
7 files changed, 193 insertions(+), 22 deletions(-)


В списке pgsql-committers по дате отправления:

Предыдущее
От: Daniel Gustafsson
Дата:
Сообщение: pgsql: Fix assertion failure in heap_vacuum_rel
Следующее
От: Tom Lane
Дата:
Сообщение: pgsql: Handle zero-length sublist correctly in Python -> SQL array conv