Thanks a lot for explanation. I'm planing to upgrade to pgsql 9.2 even for other reasons.If I need to use earlier postgresql versions I'll fix my functions using a text arguments instead of xml one.
I tried and It seams to work fine.
Regards Franco Ricci On 7-10-2012 7:06 PM, Tom Lane wrote:
franco.ri...@phys.uniroma1.it writes:I wrote the following function in Perl to make some operations with LLRP command in a RFID application: ---- CREATE OR REPLACE FUNCTION llrp_command.llrpenc_bytea(xml) RETURNS bytea AS $BODY$ use strict; use RFID::LLRP::Builder qw(encode_message);I don't know anything about RFID::LLRP::Builder, but some quick googling suggests that it accesses libxml2 under the hood. If so, and if it relies on being able to fetch external entities, you're going to need to use PG 9.2 to make this work. The fix for CVE-2012-3489 broke such cases in earlier branches. Sorry about that, but the alternatives were worse; and in any case, pre-9.2 versions never made any serious effort to allow other uses of libxml2 inside the backend. It's mostly luck that it worked for you before, I think. regards, tom lane
-- Franco Ricci LabIT Sviluppo Servizi Informatici Dipartimento di Fisica Università di Roma "La Sapienza" Piazzale Aldo Moro, 5 00185 Roma Italy tel +390649913449 fax +39064463158
<<attachment: franco_ricci.vcf>>
-- Sent via pgsql-bugs mailing list (pgsql-bugs@postgresql.org) To make changes to your subscription: http://www.postgresql.org/mailpref/pgsql-bugs
