~ubuntu-branches/ubuntu/trusty/postgresql-9.3/trusty-updates

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
1001
1002
1003
1004
1005
1006
1007
1008
1009
1010
1011
1012
1013
1014
1015
1016
1017
1018
1019
1020
1021
1022
1023
1024
1025
1026
1027
1028
1029
1030
1031
1032
1033
1034
1035
1036
1037
1038
1039
1040
1041
1042
1043
1044
1045
1046
1047
1048
1049
1050
1051
1052
1053
1054
1055
1056
1057
1058
1059
1060
1061
1062
1063
1064
1065
1066
1067
1068
1069
1070
1071
1072
1073
1074
1075
1076
1077
1078
1079
1080
1081
1082
1083
1084
1085
1086
1087
1088
1089
1090
1091
1092
1093
1094
1095
1096
1097
1098
1099
1100
1101
1102
1103
1104
1105
1106
1107
1108
1109
1110
1111
1112
1113
1114
1115
1116
1117
1118
1119
1120
1121
1122
1123
1124
1125
1126
1127
1128
1129
1130
1131
1132
1133
1134
1135
1136
1137
1138
1139
1140
1141
1142
1143
1144
1145
1146
1147
1148
1149
1150
1151
1152
1153
1154
1155
1156
1157
1158
1159
1160
1161
1162
1163
1164
1165
1166
1167
1168
1169
1170
1171
1172
1173
1174
1175
1176
1177
1178
1179
1180
1181
1182
1183
1184
1185
1186
1187
1188
1189
1190
1191
1192
1193
1194
1195
1196
1197
1198
1199
1200
1201
1202
1203
1204
1205
1206
1207
1208
1209
1210
1211
1212
1213
1214
1215
1216
1217
1218
1219
1220
1221
1222
1223
1224
1225
1226
1227
1228
1229
1230
1231
1232
1233
1234
1235
1236
1237
1238
1239
1240
1241
1242
1243
1244
1245
1246
1247
1248
1249
1250
1251
1252
1253
1254
1255
1256
1257
1258
1259
1260
1261
1262
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd">
<HTML
><HEAD
><TITLE
>Release 9.3.3</TITLE
><META
NAME="GENERATOR"
CONTENT="Modular DocBook HTML Stylesheet Version 1.79"><LINK
REV="MADE"
HREF="mailto:pgsql-docs@postgresql.org"><LINK
REL="HOME"
TITLE="PostgreSQL 9.3.13 Documentation"
HREF="index.html"><LINK
REL="UP"
TITLE="Release Notes"
HREF="release.html"><LINK
REL="PREVIOUS"
TITLE="Release 9.3.4"
HREF="release-9-3-4.html"><LINK
REL="NEXT"
TITLE="Release 9.3.2"
HREF="release-9-3-2.html"><LINK
REL="STYLESHEET"
TYPE="text/css"
HREF="stylesheet.css"><META
HTTP-EQUIV="Content-Type"
CONTENT="text/html; charset=ISO-8859-1"><META
NAME="creation"
CONTENT="2016-05-09T21:13:26"></HEAD
><BODY
CLASS="SECT1"
><DIV
CLASS="NAVHEADER"
><TABLE
SUMMARY="Header navigation table"
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TH
COLSPAN="5"
ALIGN="center"
VALIGN="bottom"
><A
HREF="index.html"
>PostgreSQL 9.3.13 Documentation</A
></TH
></TR
><TR
><TD
WIDTH="10%"
ALIGN="left"
VALIGN="top"
><A
TITLE="Release 9.3.4"
HREF="release-9-3-4.html"
ACCESSKEY="P"
>Prev</A
></TD
><TD
WIDTH="10%"
ALIGN="left"
VALIGN="top"
><A
HREF="release.html"
ACCESSKEY="U"
>Up</A
></TD
><TD
WIDTH="60%"
ALIGN="center"
VALIGN="bottom"
>Appendix E. Release Notes</TD
><TD
WIDTH="20%"
ALIGN="right"
VALIGN="top"
><A
TITLE="Release 9.3.2"
HREF="release-9-3-2.html"
ACCESSKEY="N"
>Next</A
></TD
></TR
></TABLE
><HR
ALIGN="LEFT"
WIDTH="100%"></DIV
><DIV
CLASS="SECT1"
><H1
CLASS="SECT1"
><A
NAME="RELEASE-9-3-3"
>E.11. Release 9.3.3</A
></H1
><DIV
CLASS="NOTE"
><BLOCKQUOTE
CLASS="NOTE"
><P
><B
>Release Date: </B
>2014-02-20</P
></BLOCKQUOTE
></DIV
><P
>   This release contains a variety of fixes from 9.3.2.
   For information about new features in the 9.3 major release, see
   <A
HREF="release-9-3.html"
>Section E.14</A
>.
  </P
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="AEN116377"
>E.11.1. Migration to Version 9.3.3</A
></H2
><P
>    A dump/restore is not required for those running 9.3.X.
   </P
><P
>    However, several of the issues corrected in this release could have
    resulted in corruption of foreign-key constraints; that is, there
    might now be referencing rows for which there is no matching row in
    the referenced table.  It may be worthwhile to recheck such
    constraints after installing this update.  The simplest way to do that
    is to drop and recreate each suspect constraint; however, that will
    require taking an exclusive lock on both tables, so it is unlikely to
    be acceptable in production databases.  Alternatively, you can do a
    manual join query between the two tables to look for unmatched rows.
   </P
><P
>    Note also the requirement for replication standby servers to be
    upgraded before their master server is upgraded.
   </P
><P
>    Also, if you are upgrading from a version earlier than 9.3.2,
    see <A
HREF="release-9-3-2.html"
>Section E.12</A
>.
   </P
></DIV
><DIV
CLASS="SECT2"
><H2
CLASS="SECT2"
><A
NAME="AEN116384"
>E.11.2. Changes</A
></H2
><P
></P
><UL
><LI
><P
>      Shore up <TT
CLASS="LITERAL"
>GRANT ... WITH ADMIN OPTION</TT
> restrictions
      (Noah Misch)
     </P
><P
>      Granting a role without <TT
CLASS="LITERAL"
>ADMIN OPTION</TT
> is supposed to
      prevent the grantee from adding or removing members from the granted
      role, but this restriction was easily bypassed by doing <TT
CLASS="LITERAL"
>SET
      ROLE</TT
> first.  The security impact is mostly that a role member can
      revoke the access of others, contrary to the wishes of his grantor.
      Unapproved role member additions are a lesser concern, since an
      uncooperative role member could provide most of his rights to others
      anyway by creating views or <TT
CLASS="LITERAL"
>SECURITY DEFINER</TT
> functions.
      (CVE-2014-0060)
     </P
></LI
><LI
><P
>      Prevent privilege escalation via manual calls to PL validator
      functions (Andres Freund)
     </P
><P
>      The primary role of PL validator functions is to be called implicitly
      during <TT
CLASS="COMMAND"
>CREATE FUNCTION</TT
>, but they are also normal SQL
      functions that a user can call explicitly.  Calling a validator on
      a function actually written in some other language was not checked
      for and could be exploited for privilege-escalation purposes.
      The fix involves adding a call to a privilege-checking function in
      each validator function.  Non-core procedural languages will also
      need to make this change to their own validator functions, if any.
      (CVE-2014-0061)
     </P
></LI
><LI
><P
>      Avoid multiple name lookups during table and index DDL
      (Robert Haas, Andres Freund)
     </P
><P
>      If the name lookups come to different conclusions due to concurrent
      activity, we might perform some parts of the DDL on a different table
      than other parts.  At least in the case of <TT
CLASS="COMMAND"
>CREATE INDEX</TT
>,
      this can be used to cause the permissions checks to be performed
      against a different table than the index creation, allowing for a
      privilege escalation attack.
      (CVE-2014-0062)
     </P
></LI
><LI
><P
>      Prevent buffer overrun with long datetime strings (Noah Misch)
     </P
><P
>      The <TT
CLASS="LITERAL"
>MAXDATELEN</TT
> constant was too small for the longest
      possible value of type <TT
CLASS="TYPE"
>interval</TT
>, allowing a buffer overrun
      in <CODE
CLASS="FUNCTION"
>interval_out()</CODE
>.  Although the datetime input
      functions were more careful about avoiding buffer overrun, the limit
      was short enough to cause them to reject some valid inputs, such as
      input containing a very long timezone name.  The <SPAN
CLASS="APPLICATION"
>ecpg</SPAN
>
      library contained these vulnerabilities along with some of its own.
      (CVE-2014-0063)
     </P
></LI
><LI
><P
>      Prevent buffer overrun due to integer overflow in size calculations
      (Noah Misch, Heikki Linnakangas)
     </P
><P
>      Several functions, mostly type input functions, calculated an
      allocation size without checking for overflow.  If overflow did
      occur, a too-small buffer would be allocated and then written past.
      (CVE-2014-0064)
     </P
></LI
><LI
><P
>      Prevent overruns of fixed-size buffers
      (Peter Eisentraut, Jozef Mlich)
     </P
><P
>      Use <CODE
CLASS="FUNCTION"
>strlcpy()</CODE
> and related functions to provide a clear
      guarantee that fixed-size buffers are not overrun.  Unlike the
      preceding items, it is unclear whether these cases really represent
      live issues, since in most cases there appear to be previous
      constraints on the size of the input string.  Nonetheless it seems
      prudent to silence all Coverity warnings of this type.
      (CVE-2014-0065)
     </P
></LI
><LI
><P
>      Avoid crashing if <CODE
CLASS="FUNCTION"
>crypt()</CODE
> returns NULL (Honza Horak,
      Bruce Momjian)
     </P
><P
>      There are relatively few scenarios in which <CODE
CLASS="FUNCTION"
>crypt()</CODE
>
      could return NULL, but <TT
CLASS="FILENAME"
>contrib/chkpass</TT
> would crash
      if it did.  One practical case in which this could be an issue is
      if <SPAN
CLASS="APPLICATION"
>libc</SPAN
> is configured to refuse to execute unapproved
      hashing algorithms (e.g., <SPAN
CLASS="QUOTE"
>"FIPS mode"</SPAN
>).
      (CVE-2014-0066)
     </P
></LI
><LI
><P
>      Document risks of <TT
CLASS="LITERAL"
>make check</TT
> in the regression testing
      instructions (Noah Misch, Tom Lane)
     </P
><P
>      Since the temporary server started by <TT
CLASS="LITERAL"
>make check</TT
>
      uses <SPAN
CLASS="QUOTE"
>"trust"</SPAN
> authentication, another user on the same machine
      could connect to it as database superuser, and then potentially
      exploit the privileges of the operating-system user who started the
      tests.  A future release will probably incorporate changes in the
      testing procedure to prevent this risk, but some public discussion is
      needed first.  So for the moment, just warn people against using
      <TT
CLASS="LITERAL"
>make check</TT
> when there are untrusted users on the
      same machine.
      (CVE-2014-0067)
     </P
></LI
><LI
><P
>      Rework tuple freezing protocol
      (&Aacute;lvaro Herrera, Andres Freund)
     </P
><P
>      The logic for tuple freezing was unable to handle some cases involving
      freezing of
      <A
HREF="routine-vacuuming.html#VACUUM-FOR-MULTIXACT-WRAPAROUND"
><I
CLASS="FIRSTTERM"
>multixact</I
>
      IDs</A
>, with the practical effect that shared row-level locks
      might be forgotten once old enough.
     </P
><P
>      Fixing this required changing the WAL record format for tuple
      freezing.  While this is no issue for standalone servers, when using
      replication it means that <SPAN
CLASS="emphasis"
><I
CLASS="EMPHASIS"
>standby servers must be upgraded
      to 9.3.3 or later before their masters are</I
></SPAN
>.  An older standby will
      be unable to interpret freeze records generated by a newer master, and
      will fail with a PANIC message.  (In such a case, upgrading the
      standby should be sufficient to let it resume execution.)
     </P
></LI
><LI
><P
>      Create separate GUC parameters to control multixact freezing
      (&Aacute;lvaro Herrera)
     </P
><P
>      9.3 requires multixact tuple labels to be frozen before
      they grow too old, in the same fashion as plain transaction ID labels
      have been frozen for some time.  Previously, the transaction ID
      freezing parameters were used for multixact IDs too; but since
      the consumption rates of transaction IDs and multixact IDs can be
      quite different, this did not work very well.  Introduce new settings
      <A
HREF="runtime-config-client.html#GUC-VACUUM-MULTIXACT-FREEZE-MIN-AGE"
>vacuum_multixact_freeze_min_age</A
>,
      <A
HREF="runtime-config-client.html#GUC-VACUUM-MULTIXACT-FREEZE-TABLE-AGE"
>vacuum_multixact_freeze_table_age</A
>, and
      <A
HREF="runtime-config-autovacuum.html#GUC-AUTOVACUUM-MULTIXACT-FREEZE-MAX-AGE"
>autovacuum_multixact_freeze_max_age</A
>
      to control when to freeze multixacts.
     </P
></LI
><LI
><P
>      Account for remote row locks propagated by local updates
      (&Aacute;lvaro Herrera)
     </P
><P
>      If a row was locked by transaction A, and transaction B updated it,
      the new version of the row created by B would be locked by A, yet
      visible only to B.  If transaction B then again updated the row, A's
      lock wouldn't get checked, thus possibly allowing B to complete when
      it shouldn't.  This case is new in 9.3 since prior versions did not
      have any types of row locking that would permit another transaction
      to update the row at all.
     </P
><P
>      This oversight could allow referential integrity checks to give false
      positives (for instance, allow deletes that should have been rejected).
      Applications using the new commands <TT
CLASS="LITERAL"
>SELECT FOR KEY SHARE</TT
>
      and <TT
CLASS="LITERAL"
>SELECT FOR NO KEY UPDATE</TT
> might also have suffered
      locking failures of this kind.
     </P
></LI
><LI
><P
>      Prevent <SPAN
CLASS="QUOTE"
>"forgetting"</SPAN
> valid row locks when one of several
      holders of a row lock aborts (&Aacute;lvaro Herrera)
     </P
><P
>      This was yet another mechanism by which a shared row lock could be
      lost, thus possibly allowing updates that should have been prevented
      by foreign-key constraints.
     </P
></LI
><LI
><P
>      Fix incorrect logic during update chain locking
      (&Aacute;lvaro Herrera)
     </P
><P
>      This mistake could result in spurious <SPAN
CLASS="QUOTE"
>"could not serialize access
      due to concurrent update"</SPAN
> errors in <TT
CLASS="LITERAL"
>REPEATABLE READ</TT
>
      and <TT
CLASS="LITERAL"
>SERIALIZABLE</TT
> transaction isolation modes.
     </P
></LI
><LI
><P
>      Handle wraparound correctly during extension or truncation
      of <TT
CLASS="FILENAME"
>pg_multixact/members</TT
>
      (Andres Freund, &Aacute;lvaro Herrera)
     </P
></LI
><LI
><P
>      Fix handling of 5-digit filenames in <TT
CLASS="FILENAME"
>pg_multixact/members</TT
>
      (&Aacute;lvaro Herrera)
     </P
><P
>      As of 9.3, these names can be more than 4 digits, but the directory
      cleanup code ignored such files.
     </P
></LI
><LI
><P
>      Improve performance of multixact cache code
      (&Aacute;lvaro Herrera)
     </P
></LI
><LI
><P
>      Optimize updating a row that's already locked by the same transaction
      (Andres Freund, &Aacute;lvaro Herrera)
     </P
><P
>      This fixes a performance regression from pre-9.3 versions when doing
      <TT
CLASS="LITERAL"
>SELECT FOR UPDATE</TT
> followed by <TT
CLASS="LITERAL"
>UPDATE/DELETE</TT
>.
     </P
></LI
><LI
><P
>      During archive recovery, prefer highest timeline number when WAL
      segments with the same ID are present in both the archive
      and <TT
CLASS="FILENAME"
>pg_xlog/</TT
> (Kyotaro Horiguchi)
     </P
><P
>      Previously, not-yet-archived segments could get ignored during
      recovery.  This reverts an undesirable behavioral change in 9.3.0
      back to the way things worked pre-9.3.
     </P
></LI
><LI
><P
>      Fix possible mis-replay of WAL records when some segments of a
      relation aren't full size (Greg Stark, Tom Lane)
     </P
><P
>      The WAL update could be applied to the wrong page, potentially many
      pages past where it should have been.  Aside from corrupting data,
      this error has been observed to result in significant <SPAN
CLASS="QUOTE"
>"bloat"</SPAN
>
      of standby servers compared to their masters, due to updates being
      applied far beyond where the end-of-file should have been.  This
      failure mode does not appear to be a significant risk during crash
      recovery, only when initially synchronizing a standby created from a
      base backup taken from a quickly-changing master.
     </P
></LI
><LI
><P
>      Fix bug in determining when recovery has reached consistency
      (Tomonari Katsumata, Heikki Linnakangas)
     </P
><P
>      In some cases WAL replay would mistakenly conclude that the database
      was already consistent at the start of replay, thus possibly allowing
      hot-standby queries before the database was really consistent.  Other
      symptoms such as <SPAN
CLASS="QUOTE"
>"PANIC: WAL contains references to invalid
      pages"</SPAN
> were also possible.
     </P
></LI
><LI
><P
>      Fix WAL logging of visibility map changes (Heikki Linnakangas)
     </P
></LI
><LI
><P
>      Fix improper locking of btree index pages while replaying
      a <TT
CLASS="LITERAL"
>VACUUM</TT
> operation in hot-standby mode (Andres Freund,
      Heikki Linnakangas, Tom Lane)
     </P
><P
>      This error could result in <SPAN
CLASS="QUOTE"
>"PANIC: WAL contains references to
      invalid pages"</SPAN
> failures.
     </P
></LI
><LI
><P
>      Ensure that insertions into non-leaf GIN index pages write a full-page
      WAL record when appropriate (Heikki Linnakangas)
     </P
><P
>      The previous coding risked index corruption in the event of a
      partial-page write during a system crash.
     </P
></LI
><LI
><P
>      When <TT
CLASS="LITERAL"
>pause_at_recovery_target</TT
>
      and <TT
CLASS="LITERAL"
>recovery_target_inclusive</TT
> are both set, ensure the
      target record is applied before pausing, not after (Heikki
      Linnakangas)
     </P
></LI
><LI
><P
>      Ensure walreceiver sends hot-standby feedback messages on time even
      when there is a continuous stream of data (Andres Freund, Amit
      Kapila)
     </P
></LI
><LI
><P
>      Prevent timeout interrupts from taking control away from mainline
      code unless <TT
CLASS="VARNAME"
>ImmediateInterruptOK</TT
> is set
      (Andres Freund, Tom Lane)
     </P
><P
>      This is a serious issue for any application making use of statement
      timeouts, as it could cause all manner of strange failures after a
      timeout occurred.  We have seen reports of <SPAN
CLASS="QUOTE"
>"stuck"</SPAN
> spinlocks,
      ERRORs being unexpectedly promoted to PANICs, unkillable backends,
      and other misbehaviors.
     </P
></LI
><LI
><P
>      Fix race conditions during server process exit (Robert Haas)
     </P
><P
>      Ensure that signal handlers don't attempt to use the
      process's <TT
CLASS="VARNAME"
>MyProc</TT
> pointer after it's no longer valid.
     </P
></LI
><LI
><P
>      Fix race conditions in walsender shutdown logic and walreceiver
      SIGHUP signal handler (Tom Lane)
     </P
></LI
><LI
><P
>      Fix unsafe references to <TT
CLASS="VARNAME"
>errno</TT
> within error reporting
      logic (Christian Kruse)
     </P
><P
>      This would typically lead to odd behaviors such as missing or
      inappropriate <TT
CLASS="LITERAL"
>HINT</TT
> fields.
     </P
></LI
><LI
><P
>      Fix possible crashes from using <CODE
CLASS="FUNCTION"
>ereport()</CODE
> too early
      during server startup (Tom Lane)
     </P
><P
>      The principal case we've seen in the field is a crash if the server
      is started in a directory it doesn't have permission to read.
     </P
></LI
><LI
><P
>      Clear retry flags properly in OpenSSL socket write
      function (Alexander Kukushkin)
     </P
><P
>      This omission could result in a server lockup after unexpected loss
      of an SSL-encrypted connection.
     </P
></LI
><LI
><P
>      Fix length checking for Unicode identifiers (<TT
CLASS="LITERAL"
>U&amp;"..."</TT
>
      syntax) containing escapes (Tom Lane)
     </P
><P
>      A spurious truncation warning would be printed for such identifiers
      if the escaped form of the identifier was too long, but the
      identifier actually didn't need truncation after de-escaping.
     </P
></LI
><LI
><P
>      Fix parsing of Unicode literals and identifiers just before the end
      of a command string or function body (Tom Lane)
     </P
></LI
><LI
><P
>      Allow keywords that are type names to be used in lists of roles
      (Stephen Frost)
     </P
><P
>      A previous patch allowed such keywords to be used without quoting
      in places such as role identifiers; but it missed cases where a
      list of role identifiers was permitted, such as <TT
CLASS="LITERAL"
>DROP ROLE</TT
>.
     </P
></LI
><LI
><P
>      Fix parser crash for <TT
CLASS="LITERAL"
>EXISTS(SELECT * FROM
      zero_column_table)</TT
> (Tom Lane)
     </P
></LI
><LI
><P
>      Fix possible crash due to invalid plan for nested sub-selects, such
      as <TT
CLASS="LITERAL"
>WHERE (... x IN (SELECT ...) ...) IN (SELECT ...)</TT
>
      (Tom Lane)
     </P
></LI
><LI
><P
>      Fix mishandling of <TT
CLASS="LITERAL"
>WHERE</TT
> conditions pulled up from
      a <TT
CLASS="LITERAL"
>LATERAL</TT
> subquery (Tom Lane)
     </P
><P
>      The typical symptom of this bug was a <SPAN
CLASS="QUOTE"
>"JOIN qualification
      cannot refer to other relations"</SPAN
> error, though subtle logic
      errors in created plans seem possible as well.
     </P
></LI
><LI
><P
>      Disallow <TT
CLASS="LITERAL"
>LATERAL</TT
> references to the target table of
      an <TT
CLASS="LITERAL"
>UPDATE/DELETE</TT
> (Tom Lane)
     </P
><P
>      While this might be allowed in some future release, it was
      unintentional in 9.3, and didn't work quite right anyway.
     </P
></LI
><LI
><P
>      Fix <TT
CLASS="LITERAL"
>UPDATE/DELETE</TT
> of an inherited target table
      that has <TT
CLASS="LITERAL"
>UNION ALL</TT
> subqueries (Tom Lane)
     </P
><P
>      Without this fix, <TT
CLASS="LITERAL"
>UNION ALL</TT
> subqueries aren't correctly
      inserted into the update plans for inheritance child tables after the
      first one, typically resulting in no update happening for those child
      table(s).
     </P
></LI
><LI
><P
>      Fix <TT
CLASS="COMMAND"
>ANALYZE</TT
> to not fail on a column that's a domain over
      a range type (Tom Lane)
     </P
></LI
><LI
><P
>      Ensure that <TT
CLASS="COMMAND"
>ANALYZE</TT
> creates statistics for a table column
      even when all the values in it are <SPAN
CLASS="QUOTE"
>"too wide"</SPAN
> (Tom Lane)
     </P
><P
>      <TT
CLASS="COMMAND"
>ANALYZE</TT
> intentionally omits very wide values from its
      histogram and most-common-values calculations, but it neglected to do
      something sane in the case that all the sampled entries are too wide.
     </P
></LI
><LI
><P
>      In <TT
CLASS="LITERAL"
>ALTER TABLE ... SET TABLESPACE</TT
>, allow the database's
      default tablespace to be used without a permissions check
      (Stephen Frost)
     </P
><P
>      <TT
CLASS="LITERAL"
>CREATE TABLE</TT
> has always allowed such usage,
      but <TT
CLASS="LITERAL"
>ALTER TABLE</TT
> didn't get the memo.
     </P
></LI
><LI
><P
>      Fix support for extensions containing event triggers (Tom Lane)
     </P
></LI
><LI
><P
>      Fix <SPAN
CLASS="QUOTE"
>"cannot accept a set"</SPAN
> error when some arms of
      a <TT
CLASS="LITERAL"
>CASE</TT
> return a set and others don't (Tom Lane)
     </P
></LI
><LI
><P
>      Fix memory leakage in JSON functions (Craig Ringer)
     </P
></LI
><LI
><P
>      Properly distinguish numbers from non-numbers when generating JSON
      output (Andrew Dunstan)
     </P
></LI
><LI
><P
>      Fix checks for all-zero client addresses in pgstat functions (Kevin
      Grittner)
     </P
></LI
><LI
><P
>      Fix possible misclassification of multibyte characters by the text
      search parser (Tom Lane)
     </P
><P
>      Non-ASCII characters could be misclassified when using C locale with
      a multibyte encoding.  On Cygwin, non-C locales could fail as well.
     </P
></LI
><LI
><P
>      Fix possible misbehavior in <CODE
CLASS="FUNCTION"
>plainto_tsquery()</CODE
>
      (Heikki Linnakangas)
     </P
><P
>      Use <CODE
CLASS="FUNCTION"
>memmove()</CODE
> not <CODE
CLASS="FUNCTION"
>memcpy()</CODE
> for copying
      overlapping memory regions.  There have been no field reports of
      this actually causing trouble, but it's certainly risky.
     </P
></LI
><LI
><P
>      Fix placement of permissions checks in <CODE
CLASS="FUNCTION"
>pg_start_backup()</CODE
>
      and <CODE
CLASS="FUNCTION"
>pg_stop_backup()</CODE
> (Andres Freund, Magnus Hagander)
     </P
><P
>      The previous coding might attempt to do catalog access when it
      shouldn't.
     </P
></LI
><LI
><P
>      Accept <TT
CLASS="LITERAL"
>SHIFT_JIS</TT
> as an encoding name for locale checking
      purposes (Tatsuo Ishii)
     </P
></LI
><LI
><P
>      Fix <TT
CLASS="LITERAL"
>*</TT
>-qualification of named parameters in SQL-language
      functions (Tom Lane)
     </P
><P
>      Given a composite-type parameter
      named <TT
CLASS="LITERAL"
>foo</TT
>, <TT
CLASS="LITERAL"
>$1.*</TT
> worked fine,
      but <TT
CLASS="LITERAL"
>foo.*</TT
> not so much.
     </P
></LI
><LI
><P
>      Fix misbehavior of <CODE
CLASS="FUNCTION"
>PQhost()</CODE
> on Windows (Fujii Masao)
     </P
><P
>      It should return <TT
CLASS="LITERAL"
>localhost</TT
> if no host has been specified.
     </P
></LI
><LI
><P
>      Improve error handling in <SPAN
CLASS="APPLICATION"
>libpq</SPAN
> and <SPAN
CLASS="APPLICATION"
>psql</SPAN
>
      for failures during <TT
CLASS="LITERAL"
>COPY TO STDOUT/FROM STDIN</TT
> (Tom Lane)
     </P
><P
>      In particular this fixes an infinite loop that could occur in 9.2 and
      up if the server connection was lost during <TT
CLASS="LITERAL"
>COPY FROM
      STDIN</TT
>.  Variants of that scenario might be possible in older
      versions, or with other client applications.
     </P
></LI
><LI
><P
>      Fix incorrect translation handling in
      some <SPAN
CLASS="APPLICATION"
>psql</SPAN
> <TT
CLASS="LITERAL"
>\d</TT
> commands
      (Peter Eisentraut, Tom Lane)
     </P
></LI
><LI
><P
>      Ensure <SPAN
CLASS="APPLICATION"
>pg_basebackup</SPAN
>'s background process is killed
      when exiting its foreground process (Magnus Hagander)
     </P
></LI
><LI
><P
>      Fix possible incorrect printing of filenames
      in <SPAN
CLASS="APPLICATION"
>pg_basebackup</SPAN
>'s verbose mode (Magnus Hagander)
     </P
></LI
><LI
><P
>      Avoid including tablespaces inside PGDATA twice in base backups
      (Dimitri Fontaine, Magnus Hagander)
     </P
></LI
><LI
><P
>      Fix misaligned descriptors in <SPAN
CLASS="APPLICATION"
>ecpg</SPAN
> (MauMau)
     </P
></LI
><LI
><P
>      In <SPAN
CLASS="APPLICATION"
>ecpg</SPAN
>, handle lack of a hostname in the connection
      parameters properly (Michael Meskes)
     </P
></LI
><LI
><P
>      Fix performance regression in <TT
CLASS="FILENAME"
>contrib/dblink</TT
> connection
      startup (Joe Conway)
     </P
><P
>      Avoid an unnecessary round trip when client and server encodings match.
     </P
></LI
><LI
><P
>      In <TT
CLASS="FILENAME"
>contrib/isn</TT
>, fix incorrect calculation of the check
      digit for ISMN values (Fabien Coelho)
     </P
></LI
><LI
><P
>      Fix <TT
CLASS="FILENAME"
>contrib/pgbench</TT
>'s progress logging to avoid overflow
      when the scale factor is large (Tatsuo Ishii)
     </P
></LI
><LI
><P
>      Fix <TT
CLASS="FILENAME"
>contrib/pg_stat_statement</TT
>'s handling
      of <TT
CLASS="LITERAL"
>CURRENT_DATE</TT
> and related constructs (Kyotaro
      Horiguchi)
     </P
></LI
><LI
><P
>      Improve lost-connection error handling
      in <TT
CLASS="FILENAME"
>contrib/postgres_fdw</TT
> (Tom Lane)
     </P
></LI
><LI
><P
>      Ensure client-code-only installation procedure works as documented
      (Peter Eisentraut)
     </P
></LI
><LI
><P
>      In Mingw and Cygwin builds, install the <SPAN
CLASS="APPLICATION"
>libpq</SPAN
> DLL
      in the <TT
CLASS="FILENAME"
>bin</TT
> directory (Andrew Dunstan)
     </P
><P
>      This duplicates what the MSVC build has long done.  It should fix
      problems with programs like <SPAN
CLASS="APPLICATION"
>psql</SPAN
> failing to start
      because they can't find the DLL.
     </P
></LI
><LI
><P
>      Avoid using the deprecated <TT
CLASS="LITERAL"
>dllwrap</TT
> tool in Cygwin builds
      (Marco Atzeri)
     </P
></LI
><LI
><P
>      Enable building with Visual Studio 2013 (Brar Piening)
     </P
></LI
><LI
><P
>      Don't generate plain-text <TT
CLASS="FILENAME"
>HISTORY</TT
>
      and <TT
CLASS="FILENAME"
>src/test/regress/README</TT
> files anymore (Tom Lane)
     </P
><P
>      These text files duplicated the main HTML and PDF documentation
      formats.  The trouble involved in maintaining them greatly outweighs
      the likely audience for plain-text format.  Distribution tarballs
      will still contain files by these names, but they'll just be stubs
      directing the reader to consult the main documentation.
      The plain-text <TT
CLASS="FILENAME"
>INSTALL</TT
> file will still be maintained, as
      there is arguably a use-case for that.
     </P
></LI
><LI
><P
>      Update time zone data files to <SPAN
CLASS="APPLICATION"
>tzdata</SPAN
> release 2013i
      for DST law changes in Jordan and historical changes in Cuba.
     </P
><P
>      In addition, the zones <TT
CLASS="LITERAL"
>Asia/Riyadh87</TT
>,
      <TT
CLASS="LITERAL"
>Asia/Riyadh88</TT
>, and <TT
CLASS="LITERAL"
>Asia/Riyadh89</TT
> have been
      removed, as they are no longer maintained by IANA, and never
      represented actual civil timekeeping practice.
     </P
></LI
></UL
></DIV
></DIV
><DIV
CLASS="NAVFOOTER"
><HR
ALIGN="LEFT"
WIDTH="100%"><TABLE
SUMMARY="Footer navigation table"
WIDTH="100%"
BORDER="0"
CELLPADDING="0"
CELLSPACING="0"
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
><A
HREF="release-9-3-4.html"
ACCESSKEY="P"
>Prev</A
></TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="index.html"
ACCESSKEY="H"
>Home</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
><A
HREF="release-9-3-2.html"
ACCESSKEY="N"
>Next</A
></TD
></TR
><TR
><TD
WIDTH="33%"
ALIGN="left"
VALIGN="top"
>Release 9.3.4</TD
><TD
WIDTH="34%"
ALIGN="center"
VALIGN="top"
><A
HREF="release.html"
ACCESSKEY="U"
>Up</A
></TD
><TD
WIDTH="33%"
ALIGN="right"
VALIGN="top"
>Release 9.3.2</TD
></TR
></TABLE
></DIV
></BODY
></HTML
>