Andrew Dunstan bfdfc4ecd3 Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is ... fundamentally insecure. Instead apply an opmask to the whole interpreter that imposes restrictions on unsafe operations. These restrictions are much harder to subvert than is Safe.pm, since there is no container to be broken out of. Backported to release 7.4. In releases 7.4, 8.0 and 8.1 this also includes the necessary backporting of the two interpreters model for plperl and plperlu adopted in release 8.2. In versions 8.0 and up, the use of Perl's POSIX module to undo its locale mangling on Windows has become insecure with these changes, so it is replaced by our own routine, which is also faster. Nice side effects of the changes include that it is now possible to use perl's "strict" pragma in a natural way in plperl, and that perl's $a and $b variables now work as expected in sort routines, and that function compilation is significantly faster. Tim Bunce and Andrew Dunstan, with reviews from Alex Hunsaker and Alexey Klyukin. Security: CVE-2010-1169		2010-05-13 16:40:36 +00:00
..
backend	Translation update	2010-05-13 10:50:20 +00:00
bin	Translation update	2010-05-13 10:50:20 +00:00
include	Fix "constraint_exclusion = partition" logic so that it will also attempt	2010-03-30 21:58:18 +00:00
interfaces	Translation update	2010-05-13 10:50:20 +00:00
makefiles	Allow out-of-tree builds on mingw and cygwin	2009-01-05 09:27:20 +00:00
pl	Abandon the use of Perl's Safe.pm to enforce restrictions in plperl, as it is	2010-05-13 16:40:36 +00:00
port	tag 8.4.3	2010-03-12 03:23:23 +00:00
template	Tweak configure to attempt to add -qnoansialias to CFLAGS whenever running	2009-02-11 20:02:40 +00:00
test	Fix ExecEvalArrayRef to pass down the old value of the array element or slice	2010-02-18 18:41:55 +00:00
timezone	Update time zone data files to tzdata release 2010j: DST law changes in	2010-05-11 23:01:33 +00:00
tools	Make iconv work like other optional libraries for MSVC.	2010-03-03 03:29:02 +00:00
tutorial	Remove copyright mention of Andrew Yu, per author's permission.	2010-02-02 18:52:06 +00:00
bcc32.mak	Remove old-style win32 client-only visual c++ build infrastructure for everything except	2007-03-05 14:18:38 +00:00
DEVELOPERS	Replace a couple of references to files that no longer exist in the source	2009-05-04 08:08:47 +00:00
Makefile	Add the possibility to specify an explicit validator function for foreign-data	2009-02-24 10:06:36 +00:00
Makefile.global.in	Fix the makefiles to fail cleanly if Perl is needed but not present. This	2009-06-23 03:46:00 +00:00
Makefile.shlib	Allow out-of-tree builds on mingw and cygwin	2009-01-05 09:27:20 +00:00
nls-global.mk	Do not msgmerge against /dev/null; merge against the pot file itself	2009-01-20 09:58:50 +00:00
win32.mak	Update supported standalone VC++ version to 7.1+ only, and fix	2007-08-03 10:47:11 +00:00