You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

Tom Lane ddf177228f Fix insecure parsing of server command-line switches. ... An oversight in commit e710b65c1c allowed database names beginning with "-" to be treated as though they were secure command-line switches; and this switch processing occurs before client authentication, so that even an unprivileged remote attacker could exploit the bug, needing only connectivity to the postmaster's port. Assorted exploits for this are possible, some requiring a valid database login, some not. The worst known problem is that the "-r" switch can be invoked to redirect the process's stderr output, so that subsequent error messages will be appended to any file the server can write. This can for example be used to corrupt the server's configuration files, so that it will fail when next restarted. Complete destruction of database tables is also possible. Fix by keeping the database name extracted from a startup packet fully separate from command-line switches, as had already been done with the user name field. The Postgres project thanks Mitsumasa Kondo for discovering this bug, Kyotaro Horiguchi for drafting the fix, and Noah Misch for recognizing the full extent of the danger. Security: CVE-2013-1899		13 years ago
..
backend	Fix insecure parsing of server command-line switches.	13 years ago
bin	Translation updates	13 years ago
include	Fix insecure parsing of server command-line switches.	13 years ago
interfaces	Translation updates	13 years ago
makefiles	Make pgxs build executables with the right suffix.	13 years ago
pl	Translation updates	13 years ago
port	Stamp 9.1.8.	13 years ago
template	…
test	Fix gist_box_same and gist_point_consistent to handle fuzziness correctly.	13 years ago
timezone	Update time zone data files to tzdata release 2013b.	13 years ago
tools	Properly zero-pad the day-of-year part of the win32 build number	13 years ago
tutorial	Modernize string literal syntax in tutorial example.	13 years ago
.gitignore	…
DEVELOPERS	…
Makefile	Fix some oversights in distprep and maintainer-clean targets.	15 years ago
Makefile.global.in	Add mode where contrib installcheck runs each module in a separately named database.	13 years ago
Makefile.shlib	Use single quotes in preference to double quotes for protecting pathnames.	15 years ago
bcc32.mak	…
nls-global.mk	…
win32.mak	…