mirror of
https://github.com/postgres/postgres.git
synced 2026-04-22 22:59:54 -04:00
The random number generator in OpenSSL 1.1.1 was redesigned to provide fork safety by default, thus removing the need for calling RAND_poll after forking to ensure that two processes cannot share the same state. Since we now support 1.1.0 as the minumum version, and 1.1.0 is being increasingly phased out from production use, only perform the RAND_poll initialization for installations running 1.1.0 by checking the OpenSSL version number. LibreSSL changed random number generator when forking OpenSSL and has provided fork safety since version 2.0.2. This removes the overhead of initializing the RNG for strong random for the vast majority of users for whom it is no longer required. Reviewed-by: Jacob Champion <jacob.champion@enterprisedb.com> Reviewed-by: Peter Eisentraut <peter@eisentraut.org> Reviewed-by: Michael Paquier <michael@paquier.xyz> Discussion: https://postgr.es/m/CA+hUKGKh7QrYzu=8yWEUJvXtMVm_CNWH1L_TLWCbZMwbi1XP2Q@mail.gmail.com |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| bsearch_arg.c | ||
| chklocale.c | ||
| dirent.c | ||
| dirmod.c | ||
| explicit_bzero.c | ||
| getopt.c | ||
| getopt_long.c | ||
| getpeereid.c | ||
| inet_aton.c | ||
| inet_net_ntop.c | ||
| kill.c | ||
| Makefile | ||
| meson.build | ||
| mkdtemp.c | ||
| noblock.c | ||
| open.c | ||
| path.c | ||
| pg_bitutils.c | ||
| pg_crc32c_armv8.c | ||
| pg_crc32c_armv8_choose.c | ||
| pg_crc32c_loongarch.c | ||
| pg_crc32c_sb8.c | ||
| pg_crc32c_sse42.c | ||
| pg_crc32c_sse42_choose.c | ||
| pg_popcount_avx512.c | ||
| pg_popcount_avx512_choose.c | ||
| pg_strong_random.c | ||
| pgcheckdir.c | ||
| pgmkdirp.c | ||
| pgsleep.c | ||
| pgstrcasecmp.c | ||
| pgstrsignal.c | ||
| pqsignal.c | ||
| pthread-win32.h | ||
| pthread_barrier_wait.c | ||
| qsort.c | ||
| qsort_arg.c | ||
| quotes.c | ||
| README | ||
| snprintf.c | ||
| strerror.c | ||
| strlcat.c | ||
| strlcpy.c | ||
| strnlen.c | ||
| strsep.c | ||
| strtof.c | ||
| system.c | ||
| tar.c | ||
| win32.ico | ||
| win32common.c | ||
| win32dlopen.c | ||
| win32env.c | ||
| win32error.c | ||
| win32fdatasync.c | ||
| win32fseek.c | ||
| win32gai_strerror.c | ||
| win32getrusage.c | ||
| win32gettimeofday.c | ||
| win32link.c | ||
| win32ntdll.c | ||
| win32pread.c | ||
| win32pwrite.c | ||
| win32security.c | ||
| win32setlocale.c | ||
| win32stat.c | ||
| win32ver.rc | ||
src/port/README
libpgport
=========
libpgport must have special behavior. It supplies functions to both
libraries and applications. However, there are two complexities:
1) Libraries need to use object files that are compiled with exactly
the same flags as the library. libpgport might not use the same flags,
so it is necessary to recompile the object files for individual
libraries. This is done by removing -lpgport from the link line:
# Need to recompile any libpgport object files
LIBS := $(filter-out -lpgport, $(LIBS))
and adding infrastructure to recompile the object files:
OBJS= execute.o typename.o descriptor.o data.o error.o prepare.o memory.o \
connect.o misc.o path.o exec.o \
$(filter strlcat.o, $(LIBOBJS))
The problem is that there is no testing of which object files need to be
added, but missing functions usually show up when linking user
applications.
2) For applications, we use -lpgport before -lpq, so the static files
from libpgport are linked first. This avoids having applications
dependent on symbols that are _used_ by libpq, but not intended to be
exported by libpq. libpq's libpgport usage changes over time, so such a
dependency is a problem. Windows, Linux, and macOS use an export
list to control the symbols exported by libpq.