Appendix E. Release Notes
The cost of this change is that intentional communication among Perl and Tcl functions becomes
more difﬁcult. To provide an escape hatch, PL/PerlU and PL/TclU functions continue to use only
one interpreter per session. This is not considered a security issue since all such functions execute
at the trust level of a database superuser already.
It is likely that third-party procedural languages that claim to offer trusted execution have similar
security issues. We advise contacting the authors of any PL you are depending on for security-
Our thanks to Tim Bunce for pointing out this issue (CVE-2010-3433).
Prevent possible crashes in
by disallowing it from being called withan argument
that is not one of the system catalog columns it’s intended to be used with (Heikki Linnakangas,
Treat exit code 128 (
)as non-fatal on Windows (Magnus Hagander)
Under high load, Windows processes will sometimes fail at startup with this error code. Formerly
the postmaster treated this as a panic condition and restarted the whole database, but that seems to
be an overreaction.
Fix incorrect usage of non-strict OR joinclauses in Append indexscans (Tom Lane)
This is aback-patchof an8.4ﬁxthat was missedinthe8.3branch. This corrects an error introduced
in 8.3.8 that could cause incorrect results for outer joins when the inner relation is an inheritance
Fix possible duplicate scans of
member relations (Tom Lane)
Fix “cannot handle unplanned sub-select” error (Tom Lane)
This occurred when a sub-select contains a join alias reference that expands into an expression
containing another sub-select.
Fix failure to mark cached plans as transient (Tom Lane)
If a plan is preparedwhile
CREATE INDEX CONCURRENTLY
is inprogress for oneof the referenced
tables, it is supposed to be re-planned once the index is ready for use. This was not happening
ReducePANICtoERROR in someoccasionally-reportedbtreefailurecases, andprovide additional
detail in the resulting error messages (Tom Lane)
This should improve the system’s robustness with corrupted indexes.
Prevent show_session_authorization() from crashing within autovacuum processes (Tom Lane)
Defend against functions returning setof record where not all the returned rows are actually of the
same rowtype (Tom Lane)
Fix possible failure when hashing a pass-by-reference function result (Tao Ma, Tom Lane)
Improve merge join’s handling of NULLs inthe join columns (Tom Lane)
Amerge join can now stop entirely upon reaching the ﬁrst NULL, if the sort order is such that
NULLs sort high.
Take care to fsync the contents of lockﬁles (both
and the socket lockﬁle) while
writing them (Tom Lane)
This omission could result in corrupted lockﬁle contents if the machine crashes shortly after post-
master start. That could in turn prevent subsequentattempts tostartthepostmaster from succeeding,
until the lockﬁle is manually removed.