← Back to branch summary

~ubuntu-branches/ubuntu/utopic/postgresql-9.4/utopic-security

« back to all changes in this revision

Viewing changes to doc/src/sgml/html/xfunc-sql.html

  • Committer: Package Import Robot
  • Author(s): Martin Pitt, CVE-2014-8161
  • Date: 2015-02-06 12:31:46 UTC
  • mfrom: (1.1.5) (7.1.2 utopic-proposed)
  • Revision ID: package-import@ubuntu.com-20150206123146-vtmf30jbkm7w16p8
Tags: 9.4.1-0ubuntu0.14.10
https://launchpad.net/bugs/1418928
* New upstream security/bug fix release (LP: #1418928)
  - Fix buffer overruns in to_char() [CVE-2015-0241]
  - Fix buffer overruns in contrib/pgcrypto [CVE-2015-0243]
  - Fix possible loss of frontend/backend protocol synchronization after an
    error [CVE-2015-0244]
  - Fix information leak via constraint-violation error messages
    [CVE-2014-8161]
  - See release notes for details about other fixes:
    http://www.postgresql.org/about/news/1569/

Show diffs side-by-side

added added

removed removed

Lines of Context:
doc/src/sgml/html/xfunc-sql.html
9
9
REV="MADE"
10
10
HREF="mailto:pgsql-docs@postgresql.org"><LINK
11
11
REL="HOME"
12
 
TITLE="PostgreSQL 9.4beta3 Documentation"
 
12
TITLE="PostgreSQL 9.4.1 Documentation"
13
13
HREF="index.html"><LINK
14
14
REL="UP"
15
15
TITLE="Extending SQL"
26
26
HTTP-EQUIV="Content-Type"
27
27
CONTENT="text/html; charset=ISO-8859-1"><META
28
28
NAME="creation"
29
 
CONTENT="2014-10-06T18:35:22"></HEAD
 
29
CONTENT="2015-02-02T20:51:01"></HEAD
30
30
><BODY
31
31
CLASS="SECT1"
32
32
><DIV
44
44
VALIGN="bottom"
45
45
><A
46
46
HREF="index.html"
47
 
>PostgreSQL 9.4beta3 Documentation</A
 
47
>PostgreSQL 9.4.1 Documentation</A
48
48
></TH
49
49
></TR
50
50
><TR
1091
1091
     actual argument of a function call.
1092
1092
    </P
1093
1093
><P
 
1094
>     Specifying <TT
 
1095
CLASS="LITERAL"
 
1096
>VARIADIC</TT
 
1097
> in the call is also the only way to
 
1098
     pass an empty array to a variadic function, for example:
 
1099
 
 
1100
</P><PRE
 
1101
CLASS="SCREEN"
 
1102
>SELECT mleast(VARIADIC ARRAY[]::numeric[]);</PRE
 
1103
><P>
 
1104
 
 
1105
     Simply writing <TT
 
1106
CLASS="LITERAL"
 
1107
>SELECT mleast()</TT
 
1108
> does not work because a
 
1109
     variadic parameter must match at least one actual argument.
 
1110
     (You could define a second function also named <TT
 
1111
CLASS="LITERAL"
 
1112
>mleast</TT
 
1113
>,
 
1114
     with no parameters, if you wanted to allow such calls.)
 
1115
    </P
 
1116
><P
1094
1117
>     The array element parameters generated from a variadic parameter are
1095
1118
     treated as not having any names of their own.  This means it is not
1096
1119
     possible to call a variadic function using named arguments (<A
1571
1594
><H2
1572
1595
CLASS="SECT2"
1573
1596
><A
1574
 
NAME="AEN55010"
 
1597
NAME="AEN55205"
1575
1598
>35.4.10. Polymorphic <ACRONYM
1576
1599
CLASS="ACRONYM"
1577
1600
>SQL</ACRONYM
1725
1748
><H2
1726
1749
CLASS="SECT2"
1727
1750
><A
1728
 
NAME="AEN55036"
 
1751
NAME="AEN55231"
1729
1752
>35.4.11. <ACRONYM
1730
1753
CLASS="ACRONYM"
1731
1754
>SQL</ACRONYM