delta/postgresql.git, branch REL9_0_3

Tag 9.0.3

2011-01-28T02:21:31+00:00

Update release notes.

2011-01-27T22:47:15+00:00

Security: CVE-2010-4015

Prevent buffer overrun while parsing an integer in a "query_int" value.

2011-01-27T22:43:07+00:00

contrib/intarray's gettoken() uses a fixed-size buffer to collect an
integer's digits, and did not guard against overrunning the buffer.
This is at least a backend crash risk, and in principle might allow
arbitrary code execution.  The code didn't check for overflow of the
integer value either, which while not presenting a crash risk was still
bad.

Thanks to Apple Inc's security team for reporting this issue and supplying
the fix.

Security: CVE-2010-4015

Don't include unnecessarily.

2011-01-27T21:29:44+00:00

We only need that header when compiling with icc, since the gcc variant of
ia64_get_bsp() uses in-line assembly code.  Per report from Frank Brendel,
the header doesn't exist on all IA64 platforms; so don't include it unless
we need it.

Translation updates for release 9.0.3

2011-01-27T21:13:33+00:00

Update release notes for releases 9.0.3, 8.4.7, 8.3.14, and 8.2.20.

2011-01-27T21:09:51+00:00

Correct ALTER TYPE -> SET DATA TYPE in ALTER TABLE documentation.

2011-01-25T23:52:03+00:00

The latter is the correct name of the operation to change the data type
of a column.

Noah Misch

Make ALTER TABLE revalidate uniqueness and exclusion constraints.

2011-01-21T03:48:29+00:00

Failure to do so can lead to constraint violations.  This was broken by
commit 1ddc2703a936d03953657f43345460b9242bbed1 on 2010-02-07, so
back-patch to 9.0.

Noah Misch.  Regression test by me.

Document that WITH queries are also called Common Table Expressions.

2011-01-20T02:21:33+00:00

Peter Geoghegan, reviewed by Stephen Frost

Fix miscalculation of itemsafter in array_set_slice().

2011-01-17T17:40:13+00:00

If the slice to be assigned to was before the existing array lower bound
(requiring at least one null element to spring into existence to fill the
gap), the code miscalculated how many entries needed to be copied from
the old array's null bitmap.  This could result in trashing the array's
data area (as seen in bug #5840 from Karsten Loesing), or worse.

This has been broken since we first allowed the behavior of assigning to
non-adjacent slices, in 8.2.  Back-patch to all affected versions.