postgres

Commit Graph

Author	SHA1	Message	Date
Noah Misch	a2385cac13	Obstruct shell, SQL, and conninfo injection via database and role names. Due to simplistic quoting and confusion of database names with conninfo strings, roles with the CREATEDB or CREATEROLE option could escalate to superuser privileges when a superuser next ran certain maintenance commands. The new coding rule for PQconnectdbParams() calls, documented at conninfo_array_parse(), is to pass expand_dbname=true and wrap literal database names in a trivial connection string. Escape zero-length values in appendConnStrVal(). Back-patch to 9.1 (all supported versions). Nathan Bossart, Michael Paquier, and Noah Misch. Reviewed by Peter Eisentraut. Reported by Nathan Bossart. Security: CVE-2016-5424	9 years ago
Bruce Momjian	2616a5d300	Remove tabs after spaces in C comments This was not changed in HEAD, but will be done later as part of a pgindent run. Future pgindent runs will also do this. Report by Tom Lane Backpatch through all supported branches, but not HEAD	12 years ago
Tom Lane	56ac625705	Use pg_dump's --quote-all-identifiers option in pg_upgrade. This helps guard against changes in the set of reserved keywords from one version to another. In theory it should only be an issue if we de-reserve a keyword in a newer release, since that can create the type of problem shown in bug #8128. Back-patch to 9.1 where the --quote-all-identifiers option was added.	13 years ago
Andrew Dunstan	26f4fc0184	Fix line end mishandling in pg_upgrade on Windows. pg_upgrade opened the output from pg_dumpall in text mode and wrote the split files in text mode. This caused unwanted eating of intended carriage returns on input and production of spurious carriage returns on output. To avoid this, open all these files in binary mode. On non-Windows platforms, this change has no effect. Backpatch to 9.0. On 9.0 and 9.1, we also switch from redirecting pg_dumpall's output to using pg_dumpall's -f switch, for the same reason.	13 years ago
Bruce Momjian	d8d3d2a4f3	Fix pg_upgrade of large object permissions by preserving pg_auth.oid, which is stored in pg_largeobject_metadata. No backpatch to 9.0 because you can't migrate from 9.0 to 9.0 with the same catversion (because of tablespace conflict), and a pre-9.0 migration to 9.0 has not large object permissions to migrate.	15 years ago
Bruce Momjian	25cc7424e3	Simplify functions and parameters used by pg_upgrade.	15 years ago
Bruce Momjian	5d950e3b0c	Stamp copyrights for year 2011.	15 years ago
Bruce Momjian	07456b45e6	Pgindent run on pg_upgrade source after restructuring.	15 years ago
Bruce Momjian	e13f7e9a71	Restructure the pg_upgrade code to use several global structures rather than packing everything into 'ctx' and passing that to every function.	15 years ago
Magnus Hagander	9f2e211386	Remove cvs keywords from all files.	15 years ago
Bruce Momjian	239d769e7e	pgindent run for 9.0, second run	16 years ago
Bruce Momjian	da254e3d16	Make pg_upgrade copyrights just 2010, not 2010-2010.	16 years ago
Bruce Momjian	de255a6eb1	Add copyrights to pg_upgrade and pg_upgrade_tools files, per Tom.	16 years ago
Bruce Momjian	ccbe0c14e6	Add CVS tags to pg_upgrade and pg_upgrade_support files, per request from Tom.	16 years ago
Bruce Momjian	601d1eeddc	Fix pg_upgrade's use of pg_ctl on Win32 to not send command and sever output to the same file, because it is impossible. Also set user name for pg_dumpall in pg_upgrade.	16 years ago
Bruce Momjian	1dc7c796c9	Have pg_upgrade create its output files in the current directory, rather than in a subdirectory of the $HOME directory, or $TMP in Windows.	16 years ago
Bruce Momjian	c2e9b2f288	Add pg_upgrade to /contrib; will be in 9.0 beta2. Add documentation. Supports migration from PG 8.3 and 8.4.	16 years ago

17 Commits (REL9_1_STABLE)