On Fri, Mar 7, 2025 at 10:28 AM Jacob Champion <jacob.champ...@enterprisedb.com> wrote: > > I think some of the wrapped calls into library code might actually call back > > into our code (to receive/send data), and our code then will use wait events > > around lower level operations done as part of that. > > That would be a problem, agreed, but I didn't think I'd wrapped any > callback APIs. (Admittedly I have little experience with the SSPI > stuff.) But looking at the wrapped calls in the patch... which are you > suspicious of?
I missed PAM_CONV, sorry. I'm worried about the sendAuthRequest() being done there; it doesn't seem safe to potentially ereport(ERROR) and longjmp through a PAM call stack? But I'll switch those over to something safe or else drop that part of the patch. Thanks, --Jacob
