Skip to content

fix: harden search_path in pgmq after-create.sql #2444

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Closed
brainrake wants to merge 1 commit into from
+7 −7
Closed

fix: harden search_path in pgmq after-create.sql #2444

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
14 changes: 7 additions & 7 deletions ansible/files/postgresql_extension_custom_scripts/pgmq/after-create.sql
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,12 +1,12 @@
do $$
declare
extoid oid := (select oid from pg_extension where extname = 'pgmq');
extversion text := (select extversion from pg_extension where extname = 'pgmq');
extoid oid := (select oid from pg_catalog.pg_extension where extname = 'pgmq');
extversion text := (select extversion from pg_catalog.pg_extension where extname = 'pgmq');
search_path text := (select current_setting('search_path'));
r record;
cls pg_class%rowtype;
cls pg_catalog.pg_class%rowtype;
begin
perform set_config('search_path', '', true);
perform set_config('search_path', 'pg_catalog, pg_temp', true);

/*
Override the pgmq.drop_queue to check if relevant tables are owned
Expand Down Expand Up @@ -147,15 +147,15 @@ else -- 1.5.1+
end if;


update pg_extension set extowner = 'postgres'::regrole where extname = 'pgmq';
update pg_catalog.pg_extension set extowner = 'postgres'::regrole where extname = 'pgmq';

for r in (select * from pg_depend where refobjid = extoid) loop
for r in (select * from pg_catalog.pg_depend where refobjid = extoid) loop


if r.classid = 'pg_type'::regclass then

-- store the type's relkind
select * into cls from pg_class c where c.reltype = r.objid;
select * into cls from pg_catalog.pg_class c where c.reltype = r.objid;

if r.objid::regtype::text like '%[]' then
-- do nothing (skipping array type)
Expand Down
Loading