pg_query 4.2.1 → 6.1.0

data/ext/pg_query/include/libpq/hba.h

@@ -1,179 +0,0 @@
-/*-------------------------------------------------------------------------
- *
- * hba.h
- *	  Interface to hba.c
- *
- *
- * src/include/libpq/hba.h
- *
- *-------------------------------------------------------------------------
- */
-#ifndef HBA_H
-#define HBA_H
-
-#include "libpq/pqcomm.h"	/* pgrminclude ignore */	/* needed for NetBSD */
-#include "nodes/pg_list.h"
-#include "regex/regex.h"
-
-
-/*
- * The following enum represents the authentication methods that
- * are supported by PostgreSQL.
- *
- * Note: keep this in sync with the UserAuthName array in hba.c.
- */
-typedef enum UserAuth
-{
-	uaReject,
-	uaImplicitReject,			/* Not a user-visible option */
-	uaTrust,
-	uaIdent,
-	uaPassword,
-	uaMD5,
-	uaSCRAM,
-	uaGSS,
-	uaSSPI,
-	uaPAM,
-	uaBSD,
-	uaLDAP,
-	uaCert,
-	uaRADIUS,
-	uaPeer
-#define USER_AUTH_LAST uaPeer	/* Must be last value of this enum */
-} UserAuth;
-
-/*
- * Data structures representing pg_hba.conf entries
- */
-
-typedef enum IPCompareMethod
-{
-	ipCmpMask,
-	ipCmpSameHost,
-	ipCmpSameNet,
-	ipCmpAll
-} IPCompareMethod;
-
-typedef enum ConnType
-{
-	ctLocal,
-	ctHost,
-	ctHostSSL,
-	ctHostNoSSL,
-	ctHostGSS,
-	ctHostNoGSS,
-} ConnType;
-
-typedef enum ClientCertMode
-{
-	clientCertOff,
-	clientCertCA,
-	clientCertFull
-} ClientCertMode;
-
-typedef enum ClientCertName
-{
-	clientCertCN,
-	clientCertDN
-} ClientCertName;
-
-typedef struct HbaLine
-{
-	int			linenumber;
-	char	   *rawline;
-	ConnType	conntype;
-	List	   *databases;
-	List	   *roles;
-	struct sockaddr_storage addr;
-	int			addrlen;		/* zero if we don't have a valid addr */
-	struct sockaddr_storage mask;
-	int			masklen;		/* zero if we don't have a valid mask */
-	IPCompareMethod ip_cmp_method;
-	char	   *hostname;
-	UserAuth	auth_method;
-	char	   *usermap;
-	char	   *pamservice;
-	bool		pam_use_hostname;
-	bool		ldaptls;
-	char	   *ldapscheme;
-	char	   *ldapserver;
-	int			ldapport;
-	char	   *ldapbinddn;
-	char	   *ldapbindpasswd;
-	char	   *ldapsearchattribute;
-	char	   *ldapsearchfilter;
-	char	   *ldapbasedn;
-	int			ldapscope;
-	char	   *ldapprefix;
-	char	   *ldapsuffix;
-	ClientCertMode clientcert;
-	ClientCertName clientcertname;
-	char	   *krb_realm;
-	bool		include_realm;
-	bool		compat_realm;
-	bool		upn_username;
-	List	   *radiusservers;
-	char	   *radiusservers_s;
-	List	   *radiussecrets;
-	char	   *radiussecrets_s;
-	List	   *radiusidentifiers;
-	char	   *radiusidentifiers_s;
-	List	   *radiusports;
-	char	   *radiusports_s;
-} HbaLine;
-
-typedef struct IdentLine
-{
-	int			linenumber;
-
-	char	   *usermap;
-	char	   *ident_user;
-	char	   *pg_role;
-	regex_t		re;
-} IdentLine;
-
-/*
- * A single string token lexed from an authentication configuration file
- * (pg_ident.conf or pg_hba.conf), together with whether the token has
- * been quoted.
- */
-typedef struct AuthToken
-{
-	char	   *string;
-	bool		quoted;
-} AuthToken;
-
-/*
- * TokenizedAuthLine represents one line lexed from an authentication
- * configuration file.  Each item in the "fields" list is a sub-list of
- * AuthTokens.  We don't emit a TokenizedAuthLine for empty or all-comment
- * lines, so "fields" is never NIL (nor are any of its sub-lists).
- *
- * Exception: if an error occurs during tokenization, we might have
- * fields == NIL, in which case err_msg != NULL.
- */
-typedef struct TokenizedAuthLine
-{
-	List	   *fields;			/* List of lists of AuthTokens */
-	int			line_num;		/* Line number */
-	char	   *raw_line;		/* Raw line text */
-	char	   *err_msg;		/* Error message if any */
-} TokenizedAuthLine;
-
-/* kluge to avoid including libpq/libpq-be.h here */
-typedef struct Port hbaPort;
-
-extern bool load_hba(void);
-extern bool load_ident(void);
-extern const char *hba_authname(UserAuth auth_method);
-extern void hba_getauthmethod(hbaPort *port);
-extern int	check_usermap(const char *usermap_name,
-						  const char *pg_role, const char *auth_user,
-						  bool case_insensitive);
-extern HbaLine *parse_hba_line(TokenizedAuthLine *tok_line, int elevel);
-extern IdentLine *parse_ident_line(TokenizedAuthLine *tok_line, int elevel);
-extern bool pg_isblank(const char c);
-extern MemoryContext tokenize_auth_file(const char *filename, FILE *file,
-										List **tok_lines, int elevel);
-
-#endif							/* HBA_H */

data/ext/pg_query/include/libpq/libpq-be.h

@@ -1,343 +0,0 @@
-/*-------------------------------------------------------------------------
- *
- * libpq-be.h
- *	  This file contains definitions for structures and externs used
- *	  by the postmaster during client authentication.
- *
- *	  Note that this is backend-internal and is NOT exported to clients.
- *	  Structs that need to be client-visible are in pqcomm.h.
- *
- *
- * Portions Copyright (c) 1996-2022, PostgreSQL Global Development Group
- * Portions Copyright (c) 1994, Regents of the University of California
- *
- * src/include/libpq/libpq-be.h
- *
- *-------------------------------------------------------------------------
- */
-#ifndef LIBPQ_BE_H
-#define LIBPQ_BE_H
-
-#include <sys/time.h>
-#ifdef USE_OPENSSL
-#include <openssl/ssl.h>
-#include <openssl/err.h>
-#endif
-#ifdef HAVE_NETINET_TCP_H
-#include <netinet/tcp.h>
-#endif
-
-#ifdef ENABLE_GSS
-#if defined(HAVE_GSSAPI_H)
-#include <gssapi.h>
-#else
-#include <gssapi/gssapi.h>
-#endif							/* HAVE_GSSAPI_H */
-/*
- * GSSAPI brings in headers that set a lot of things in the global namespace on win32,
- * that doesn't match the msvc build. It gives a bunch of compiler warnings that we ignore,
- * but also defines a symbol that simply does not exist. Undefine it again.
- */
-#ifdef _MSC_VER
-#undef HAVE_GETADDRINFO
-#endif
-#endif							/* ENABLE_GSS */
-
-#ifdef ENABLE_SSPI
-#define SECURITY_WIN32
-#if defined(WIN32) && !defined(_MSC_VER)
-#include <ntsecapi.h>
-#endif
-#include <security.h>
-#undef SECURITY_WIN32
-
-#ifndef ENABLE_GSS
-/*
- * Define a fake structure compatible with GSSAPI on Unix.
- */
-typedef struct
-{
-	void	   *value;
-	int			length;
-} gss_buffer_desc;
-#endif
-#endif							/* ENABLE_SSPI */
-
-#include "datatype/timestamp.h"
-#include "libpq/hba.h"
-#include "libpq/pqcomm.h"
-
-
-typedef enum CAC_state
-{
-	CAC_OK,
-	CAC_STARTUP,
-	CAC_SHUTDOWN,
-	CAC_RECOVERY,
-	CAC_NOTCONSISTENT,
-	CAC_TOOMANY
-} CAC_state;
-
-
-/*
- * GSSAPI specific state information
- */
-#if defined(ENABLE_GSS) | defined(ENABLE_SSPI)
-typedef struct
-{
-	gss_buffer_desc outbuf;		/* GSSAPI output token buffer */
-#ifdef ENABLE_GSS
-	gss_cred_id_t cred;			/* GSSAPI connection cred's */
-	gss_ctx_id_t ctx;			/* GSSAPI connection context */
-	gss_name_t	name;			/* GSSAPI client name */
-	char	   *princ;			/* GSSAPI Principal used for auth, NULL if
-								 * GSSAPI auth was not used */
-	bool		auth;			/* GSSAPI Authentication used */
-	bool		enc;			/* GSSAPI encryption in use */
-#endif
-} pg_gssinfo;
-#endif
-
-/*
- * This is used by the postmaster in its communication with frontends.  It
- * contains all state information needed during this communication before the
- * backend is run.  The Port structure is kept in malloc'd memory and is
- * still available when a backend is running (see MyProcPort).  The data
- * it points to must also be malloc'd, or else palloc'd in TopMemoryContext,
- * so that it survives into PostgresMain execution!
- *
- * remote_hostname is set if we did a successful reverse lookup of the
- * client's IP address during connection setup.
- * remote_hostname_resolv tracks the state of hostname verification:
- *	+1 = remote_hostname is known to resolve to client's IP address
- *	-1 = remote_hostname is known NOT to resolve to client's IP address
- *	 0 = we have not done the forward DNS lookup yet
- *	-2 = there was an error in name resolution
- * If reverse lookup of the client IP address fails, remote_hostname will be
- * left NULL while remote_hostname_resolv is set to -2.  If reverse lookup
- * succeeds but forward lookup fails, remote_hostname_resolv is also set to -2
- * (the case is distinguishable because remote_hostname isn't NULL).  In
- * either of the -2 cases, remote_hostname_errcode saves the lookup return
- * code for possible later use with gai_strerror.
- */
-
-typedef struct Port
-{
-	pgsocket	sock;			/* File descriptor */
-	bool		noblock;		/* is the socket in non-blocking mode? */
-	ProtocolVersion proto;		/* FE/BE protocol version */
-	SockAddr	laddr;			/* local addr (postmaster) */
-	SockAddr	raddr;			/* remote addr (client) */
-	char	   *remote_host;	/* name (or ip addr) of remote host */
-	char	   *remote_hostname;	/* name (not ip addr) of remote host, if
-									 * available */
-	int			remote_hostname_resolv; /* see above */
-	int			remote_hostname_errcode;	/* see above */
-	char	   *remote_port;	/* text rep of remote port */
-	CAC_state	canAcceptConnections;	/* postmaster connection status */
-
-	/*
-	 * Information that needs to be saved from the startup packet and passed
-	 * into backend execution.  "char *" fields are NULL if not set.
-	 * guc_options points to a List of alternating option names and values.
-	 */
-	char	   *database_name;
-	char	   *user_name;
-	char	   *cmdline_options;
-	List	   *guc_options;
-
-	/*
-	 * The startup packet application name, only used here for the "connection
-	 * authorized" log message. We shouldn't use this post-startup, instead
-	 * the GUC should be used as application can change it afterward.
-	 */
-	char	   *application_name;
-
-	/*
-	 * Information that needs to be held during the authentication cycle.
-	 */
-	HbaLine    *hba;
-
-	/*
-	 * Authenticated identity.  The meaning of this identifier is dependent on
-	 * hba->auth_method; it is the identity (if any) that the user presented
-	 * during the authentication cycle, before they were assigned a database
-	 * role.  (It is effectively the "SYSTEM-USERNAME" of a pg_ident usermap
-	 * -- though the exact string in use may be different, depending on pg_hba
-	 * options.)
-	 *
-	 * authn_id is NULL if the user has not actually been authenticated, for
-	 * example if the "trust" auth method is in use.
-	 */
-	const char *authn_id;
-
-	/*
-	 * TCP keepalive and user timeout settings.
-	 *
-	 * default values are 0 if AF_UNIX or not yet known; current values are 0
-	 * if AF_UNIX or using the default. Also, -1 in a default value means we
-	 * were unable to find out the default (getsockopt failed).
-	 */
-	int			default_keepalives_idle;
-	int			default_keepalives_interval;
-	int			default_keepalives_count;
-	int			default_tcp_user_timeout;
-	int			keepalives_idle;
-	int			keepalives_interval;
-	int			keepalives_count;
-	int			tcp_user_timeout;
-
-	/*
-	 * GSSAPI structures.
-	 */
-#if defined(ENABLE_GSS) || defined(ENABLE_SSPI)
-
-	/*
-	 * If GSSAPI is supported and used on this connection, store GSSAPI
-	 * information.  Even when GSSAPI is not compiled in, store a NULL pointer
-	 * to keep struct offsets the same (for extension ABI compatibility).
-	 */
-	pg_gssinfo *gss;
-#else
-	void	   *gss;
-#endif
-
-	/*
-	 * SSL structures.
-	 */
-	bool		ssl_in_use;
-	char	   *peer_cn;
-	char	   *peer_dn;
-	bool		peer_cert_valid;
-
-	/*
-	 * OpenSSL structures. (Keep these last so that the locations of other
-	 * fields are the same whether or not you build with SSL enabled.)
-	 */
-#ifdef USE_OPENSSL
-	SSL		   *ssl;
-	X509	   *peer;
-#endif
-} Port;
-
-#ifdef USE_SSL
-/*
- *	Hardcoded DH parameters, used in ephemeral DH keying.  (See also
- *	README.SSL for more details on EDH.)
- *
- *	This is the 2048-bit DH parameter from RFC 3526.  The generation of the
- *	prime is specified in RFC 2412 Appendix E, which also discusses the
- *	design choice of the generator.  Note that when loaded with OpenSSL
- *	this causes DH_check() to fail on DH_NOT_SUITABLE_GENERATOR, where
- *	leaking a bit is preferred.
- */
-#define FILE_DH2048 \
-"-----BEGIN DH PARAMETERS-----\n\
-MIIBCAKCAQEA///////////JD9qiIWjCNMTGYouA3BzRKQJOCIpnzHQCC76mOxOb\n\
-IlFKCHmONATd75UZs806QxswKwpt8l8UN0/hNW1tUcJF5IW1dmJefsb0TELppjft\n\
-awv/XLb0Brft7jhr+1qJn6WunyQRfEsf5kkoZlHs5Fs9wgB8uKFjvwWY2kg2HFXT\n\
-mmkWP6j9JM9fg2VdI9yjrZYcYvNWIIVSu57VKQdwlpZtZww1Tkq8mATxdGwIyhgh\n\
-fDKQXkYuNs474553LBgOhgObJ4Oi7Aeij7XFXfBvTFLJ3ivL9pVYFxg5lUl86pVq\n\
-5RXSJhiY+gUQFXKOWoqsqmj//////////wIBAg==\n\
------END DH PARAMETERS-----\n"
-
-/*
- * These functions are implemented by the glue code specific to each
- * SSL implementation (e.g. be-secure-openssl.c)
- */
-
-/*
- * Initialize global SSL context.
- *
- * If isServerStart is true, report any errors as FATAL (so we don't return).
- * Otherwise, log errors at LOG level and return -1 to indicate trouble,
- * preserving the old SSL state if any.  Returns 0 if OK.
- */
-extern int	be_tls_init(bool isServerStart);
-
-/*
- * Destroy global SSL context, if any.
- */
-extern void be_tls_destroy(void);
-
-/*
- * Attempt to negotiate SSL connection.
- */
-extern int	be_tls_open_server(Port *port);
-
-/*
- * Close SSL connection.
- */
-extern void be_tls_close(Port *port);
-
-/*
- * Read data from a secure connection.
- */
-extern ssize_t be_tls_read(Port *port, void *ptr, size_t len, int *waitfor);
-
-/*
- * Write data to a secure connection.
- */
-extern ssize_t be_tls_write(Port *port, void *ptr, size_t len, int *waitfor);
-
-/*
- * Return information about the SSL connection.
- */
-extern int	be_tls_get_cipher_bits(Port *port);
-extern const char *be_tls_get_version(Port *port);
-extern const char *be_tls_get_cipher(Port *port);
-extern void be_tls_get_peer_subject_name(Port *port, char *ptr, size_t len);
-extern void be_tls_get_peer_issuer_name(Port *port, char *ptr, size_t len);
-extern void be_tls_get_peer_serial(Port *port, char *ptr, size_t len);
-
-/*
- * Get the server certificate hash for SCRAM channel binding type
- * tls-server-end-point.
- *
- * The result is a palloc'd hash of the server certificate with its
- * size, and NULL if there is no certificate available.
- *
- * This is not supported with old versions of OpenSSL that don't have
- * the X509_get_signature_nid() function.
- */
-#if defined(USE_OPENSSL) && defined(HAVE_X509_GET_SIGNATURE_NID)
-#define HAVE_BE_TLS_GET_CERTIFICATE_HASH
-extern char *be_tls_get_certificate_hash(Port *port, size_t *len);
-#endif
-
-/* init hook for SSL, the default sets the password callback if appropriate */
-#ifdef USE_OPENSSL
-typedef void (*openssl_tls_init_hook_typ) (SSL_CTX *context, bool isServerStart);
-extern PGDLLIMPORT openssl_tls_init_hook_typ openssl_tls_init_hook;
-#endif
-
-#endif							/* USE_SSL */
-
-#ifdef ENABLE_GSS
-/*
- * Return information about the GSSAPI authenticated connection
- */
-extern bool be_gssapi_get_auth(Port *port);
-extern bool be_gssapi_get_enc(Port *port);
-extern const char *be_gssapi_get_princ(Port *port);
-
-/* Read and write to a GSSAPI-encrypted connection. */
-extern ssize_t be_gssapi_read(Port *port, void *ptr, size_t len);
-extern ssize_t be_gssapi_write(Port *port, void *ptr, size_t len);
-#endif							/* ENABLE_GSS */
-
-extern PGDLLIMPORT ProtocolVersion FrontendProtocol;
-
-/* TCP keepalives configuration. These are no-ops on an AF_UNIX socket. */
-
-extern int	pq_getkeepalivesidle(Port *port);
-extern int	pq_getkeepalivesinterval(Port *port);
-extern int	pq_getkeepalivescount(Port *port);
-extern int	pq_gettcpusertimeout(Port *port);
-
-extern int	pq_setkeepalivesidle(int idle, Port *port);
-extern int	pq_setkeepalivesinterval(int interval, Port *port);
-extern int	pq_setkeepalivescount(int count, Port *port);
-extern int	pq_settcpusertimeout(int timeout, Port *port);
-
-#endif							/* LIBPQ_BE_H */

data/ext/pg_query/include/libpq/libpq.h

@@ -1,144 +0,0 @@
-/*-------------------------------------------------------------------------
- *
- * libpq.h
- *	  POSTGRES LIBPQ buffer structure definitions.
- *
- *
- * Portions Copyright (c) 1996-2022, PostgreSQL Global Development Group
- * Portions Copyright (c) 1994, Regents of the University of California
- *
- * src/include/libpq/libpq.h
- *
- *-------------------------------------------------------------------------
- */
-#ifndef LIBPQ_H
-#define LIBPQ_H
-
-#include <netinet/in.h>
-
-#include "lib/stringinfo.h"
-#include "libpq/libpq-be.h"
-#include "storage/latch.h"
-
-
-/*
- * Callers of pq_getmessage() must supply a maximum expected message size.
- * By convention, if there's not any specific reason to use another value,
- * use PQ_SMALL_MESSAGE_LIMIT for messages that shouldn't be too long, and
- * PQ_LARGE_MESSAGE_LIMIT for messages that can be long.
- */
-#define PQ_SMALL_MESSAGE_LIMIT	10000
-#define PQ_LARGE_MESSAGE_LIMIT	(MaxAllocSize - 1)
-
-typedef struct
-{
-	void		(*comm_reset) (void);
-	int			(*flush) (void);
-	int			(*flush_if_writable) (void);
-	bool		(*is_send_pending) (void);
-	int			(*putmessage) (char msgtype, const char *s, size_t len);
-	void		(*putmessage_noblock) (char msgtype, const char *s, size_t len);
-} PQcommMethods;
-
-extern const PGDLLIMPORT PQcommMethods *PqCommMethods;
-
-#define pq_comm_reset() (PqCommMethods->comm_reset())
-#define pq_flush() (PqCommMethods->flush())
-#define pq_flush_if_writable() (PqCommMethods->flush_if_writable())
-#define pq_is_send_pending() (PqCommMethods->is_send_pending())
-#define pq_putmessage(msgtype, s, len) \
-	(PqCommMethods->putmessage(msgtype, s, len))
-#define pq_putmessage_noblock(msgtype, s, len) \
-	(PqCommMethods->putmessage_noblock(msgtype, s, len))
-
-/*
- * External functions.
- */
-
-/*
- * prototypes for functions in pqcomm.c
- */
-extern PGDLLIMPORT WaitEventSet *FeBeWaitSet;
-
-#define FeBeWaitSetSocketPos 0
-#define FeBeWaitSetLatchPos 1
-#define FeBeWaitSetNEvents 3
-
-extern int	StreamServerPort(int family, const char *hostName,
-							 unsigned short portNumber, const char *unixSocketDir,
-							 pgsocket ListenSocket[], int MaxListen);
-extern int	StreamConnection(pgsocket server_fd, Port *port);
-extern void StreamClose(pgsocket sock);
-extern void TouchSocketFiles(void);
-extern void RemoveSocketFiles(void);
-extern void pq_init(void);
-extern int	pq_getbytes(char *s, size_t len);
-extern void pq_startmsgread(void);
-extern void pq_endmsgread(void);
-extern bool pq_is_reading_msg(void);
-extern int	pq_getmessage(StringInfo s, int maxlen);
-extern int	pq_getbyte(void);
-extern int	pq_peekbyte(void);
-extern int	pq_getbyte_if_available(unsigned char *c);
-extern bool pq_buffer_has_data(void);
-extern int	pq_putmessage_v2(char msgtype, const char *s, size_t len);
-extern bool pq_check_connection(void);
-
-/*
- * prototypes for functions in be-secure.c
- */
-extern PGDLLIMPORT char *ssl_library;
-extern PGDLLIMPORT char *ssl_cert_file;
-extern PGDLLIMPORT char *ssl_key_file;
-extern PGDLLIMPORT char *ssl_ca_file;
-extern PGDLLIMPORT char *ssl_crl_file;
-extern PGDLLIMPORT char *ssl_crl_dir;
-extern PGDLLIMPORT char *ssl_dh_params_file;
-extern PGDLLIMPORT char *ssl_passphrase_command;
-extern PGDLLIMPORT bool ssl_passphrase_command_supports_reload;
-#ifdef USE_SSL
-extern PGDLLIMPORT bool ssl_loaded_verify_locations;
-#endif
-
-extern int	secure_initialize(bool isServerStart);
-extern bool secure_loaded_verify_locations(void);
-extern void secure_destroy(void);
-extern int	secure_open_server(Port *port);
-extern void secure_close(Port *port);
-extern ssize_t secure_read(Port *port, void *ptr, size_t len);
-extern ssize_t secure_write(Port *port, void *ptr, size_t len);
-extern ssize_t secure_raw_read(Port *port, void *ptr, size_t len);
-extern ssize_t secure_raw_write(Port *port, const void *ptr, size_t len);
-
-/*
- * prototypes for functions in be-secure-gssapi.c
- */
-#ifdef ENABLE_GSS
-extern ssize_t secure_open_gssapi(Port *port);
-#endif
-
-/* GUCs */
-extern PGDLLIMPORT char *SSLCipherSuites;
-extern PGDLLIMPORT char *SSLECDHCurve;
-extern PGDLLIMPORT bool SSLPreferServerCiphers;
-extern PGDLLIMPORT int ssl_min_protocol_version;
-extern PGDLLIMPORT int ssl_max_protocol_version;
-
-enum ssl_protocol_versions
-{
-	PG_TLS_ANY = 0,
-	PG_TLS1_VERSION,
-	PG_TLS1_1_VERSION,
-	PG_TLS1_2_VERSION,
-	PG_TLS1_3_VERSION,
-};
-
-/*
- * prototypes for functions in be-secure-common.c
- */
-extern int	run_ssl_passphrase_command(const char *prompt, bool is_server_start,
-									   char *buf, int size);
-extern bool check_ssl_key_file_permissions(const char *ssl_key_file,
-										   bool isServerStart);
-
-#endif							/* LIBPQ_H */