mirror of
https://github.com/postgres/postgres.git
synced 2026-02-25 10:50:50 -05:00
3d4dc1acf5
parser will allow "\'" to be used to represent a literal quote mark. The "\'" representation has been deprecated for some time in favor of the SQL-standard representation "''" (two single quote marks), but it has been used often enough that just disallowing it immediately won't do. Hence backslash_quote allows the settings "on", "off", and "safe_encoding", the last meaning to allow "\'" only if client_encoding is a valid server encoding. That is now the default, and the reason is that in encodings such as SJIS that allow 0x5c (ASCII backslash) to be the last byte of a multibyte character, accepting "\'" allows SQL-injection attacks as per CVE-2006-2314 (further details will be published after release). The "on" setting is available for backward compatibility, but it must not be used with clients that are exposed to untrusted input. Thanks to Akio Ishida and Yasuo Ohgaki for identifying this security issue.
49 lines
1.2 KiB
C
49 lines
1.2 KiB
C
/*-------------------------------------------------------------------------
|
|
*
|
|
* gramparse.h
|
|
* Declarations for routines exported from lexer and parser files.
|
|
*
|
|
*
|
|
* Portions Copyright (c) 1996-2005, PostgreSQL Global Development Group
|
|
* Portions Copyright (c) 1994, Regents of the University of California
|
|
*
|
|
* $PostgreSQL: pgsql/src/include/parser/gramparse.h,v 1.31.6.1 2006/05/21 20:11:02 tgl Exp $
|
|
*
|
|
*-------------------------------------------------------------------------
|
|
*/
|
|
|
|
#ifndef GRAMPARSE_H
|
|
#define GRAMPARSE_H
|
|
|
|
#include "nodes/parsenodes.h"
|
|
|
|
|
|
typedef enum
|
|
{
|
|
BACKSLASH_QUOTE_OFF,
|
|
BACKSLASH_QUOTE_ON,
|
|
BACKSLASH_QUOTE_SAFE_ENCODING
|
|
} BackslashQuoteType;
|
|
|
|
/* GUC variables in scan.l (every one of these is a bad idea :-() */
|
|
extern BackslashQuoteType backslash_quote;
|
|
extern bool escape_string_warning;
|
|
|
|
|
|
/* from parser.c */
|
|
extern int yylex(void);
|
|
|
|
/* from scan.l */
|
|
extern void scanner_init(const char *str);
|
|
extern void scanner_finish(void);
|
|
extern int base_yylex(void);
|
|
extern void yyerror(const char *message);
|
|
|
|
/* from gram.y */
|
|
extern void parser_init(void);
|
|
extern int yyparse(void);
|
|
extern List *SystemFuncName(char *name);
|
|
extern TypeName *SystemTypeName(char *name);
|
|
extern bool exprIsNullConstant(Node *arg);
|
|
|
|
#endif /* GRAMPARSE_H */
|