Don't pass strings directly to errdetail() and errhint() - use
authorMagnus Hagander <magnus@hagander.net>
Thu, 20 Nov 2008 15:36:22 +0000 (15:36 +0000)
committerMagnus Hagander <magnus@hagander.net>
Thu, 20 Nov 2008 15:36:22 +0000 (15:36 +0000)
commitbab3f077a05d7da95017fdd1a7ddb9649b912da7
tree654e3ffe0f53c02df2b28a0d2fe56494cd571dce
parent563a87f679cec7dd49b87b47560200104b022d09
Don't pass strings directly to errdetail() and errhint() - use
%s to unescape them. Fixes a potential security issue (in as yet
unreleased code)
src/pl/plpgsql/src/pl_exec.c