Re: Is MinMaxExpr really leakproof?

2019-01-03 Thread Stephen Frost
Greetings, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Stephen Frost writes: > > * Tom Lane (t...@sss.pgh.pa.us) wrote: > >> So I'd like to get to a point where we're comfortable marking these > >> functions leakproof despite the possibility of corner-case failures. > >> We could just decide that

Re: Is MinMaxExpr really leakproof?

2019-01-02 Thread Tom Lane
Stephen Frost writes: > * Tom Lane (t...@sss.pgh.pa.us) wrote: >> So I'd like to get to a point where we're comfortable marking these >> functions leakproof despite the possibility of corner-case failures. >> We could just decide that the existing failure cases in varstr_cmp are >> not usefully

Re: Is MinMaxExpr really leakproof?

2019-01-02 Thread Stephen Frost
Greetings, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Stephen Frost writes: > > * Tom Lane (t...@sss.pgh.pa.us) wrote: > >> Noah Misch writes: > >>> Either of those solutions sounds fine. Like last time, I'll vote for > >>> explicitly > >>> verifying leakproofness. > > >> Yeah, I'm leaning in

Re: Is MinMaxExpr really leakproof?

2019-01-02 Thread Tom Lane
Stephen Frost writes: > * Tom Lane (t...@sss.pgh.pa.us) wrote: >> Noah Misch writes: >>> Either of those solutions sounds fine. Like last time, I'll vote for >>> explicitly >>> verifying leakproofness. >> Yeah, I'm leaning in that direction as well. Other than comparisons >> involving

Re: Is MinMaxExpr really leakproof?

2019-01-02 Thread Stephen Frost
Greetings, * Tom Lane (t...@sss.pgh.pa.us) wrote: > Noah Misch writes: > > Either of those solutions sounds fine. Like last time, I'll vote for > > explicitly > > verifying leakproofness. > > Yeah, I'm leaning in that direction as well. Other than comparisons > involving strings, it's not

Re: Is MinMaxExpr really leakproof?

2018-12-31 Thread Andrew Gierth
> "Tom" == Tom Lane writes: >> bttextcmp() and other varstr_cmp() callers fall afoul of the same >> restriction with their "could not convert string to UTF-16" errors >> (https://postgr.es/m/CADyhKSXPwrUv%2B9LtqPAQ_gyZTv4hYbr2KwqBxcs6a3Vee1jBLQ%40mail.gmail.com). >> Leaking the binary

Re: Is MinMaxExpr really leakproof?

2018-12-31 Thread Tom Lane
Isaac Morland writes: > On Mon, 31 Dec 2018 at 12:26, Noah Misch wrote: >> bttextcmp() and other varstr_cmp() callers fall afoul of the same >> restriction with their "could not convert string to UTF-16" errors > I'm confused. What characters cannot be represented in UTF-16? What's actually

Re: Is MinMaxExpr really leakproof?

2018-12-31 Thread Tom Lane
Noah Misch writes: > This thread duplicates > https://postgr.es/m/flat/16539.1431472961%40sss.pgh.pa.us Ah, so it does. Not sure why that fell off the radar without getting fixed; possibly because it was right before PGCon. > pg_lsn_cmp() and btoidvectorcmp() surely could advertise

Re: Is MinMaxExpr really leakproof?

2018-12-31 Thread Noah Misch
This thread duplicates https://postgr.es/m/flat/16539.1431472961%40sss.pgh.pa.us On Sun, Dec 30, 2018 at 01:24:02PM -0500, Tom Lane wrote: > So this coding amounts to an undocumented > assumption that every non-cross-type btree comparison function is > leakproof. > select p.oid::regprocedure