| From: | Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us> |
|---|---|
| To: | "Zeugswetter Andreas SB SD" <ZeugswetterA(at)spardat(dot)at> |
| Cc: | "Justin Clift" <justin(at)postgresql(dot)org>, "Christopher Kings-Lynne" <chriskl(at)familyhealth(dot)com(dot)au>, "Vince Vielhaber" <vev(at)michvhf(dot)com>, pgsql-hackers(at)postgresql(dot)org |
| Subject: | Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in |
| Date: | 2002-08-22 04:03:09 |
| Message-ID: | 28916.1029988989@sss.pgh.pa.us |
| Views: | Raw Message | Whole Thread | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-hackers |
"Zeugswetter Andreas SB SD" <ZeugswetterA(at)spardat(dot)at> writes:
> Ok, now I vote, that you don't implement "any" and use "opaque".
> I don't think we want two types that do the same thing.
> Is it that you like the name "any" more than "opaque" ?
No, it's that I want to deprecate "opaque" so that we can catch old
uses that should not be there anymore. If you look at your code and
you decide that "any" is the correct semantics, then fine: change
"opaque" to "any" and the warnings will go away. But relatively few
existing uses of "opaque" really mean "any", and I don't want the
people who are using "opaque" to mean "cstring", "trigger", etc
to keep using "opaque" for those other purposes. The idea here is
to force a security review.
regards, tom lane
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Tom Lane | 2002-08-22 04:04:13 | Re: @(#)Mordred Labs advisory 0x0002: Buffer overflow in PostgreSQL |
| Previous Message | Marc G. Fournier | 2002-08-22 03:33:28 | Re: libpq++ documentation ... |