Skip site navigation (1) Skip section navigation (2)

Re: [HACKERS] Possible make_oidjoins_check Security Issue

From: Neil Conway <neilc(at)samurai(dot)com>
To: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>
Cc: Gavin Sherry <swm(at)linuxworld(dot)com(dot)au>,Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>,PostgreSQL-patches <pgsql-patches(at)postgresql(dot)org>
Subject: Re: [HACKERS] Possible make_oidjoins_check Security Issue
Date: 2004-11-04 05:46:18
Message-ID: 1099547178.23392.38.camel@localhost.localdomain (view raw or flat)
Thread:
Lists: pgsql-hackerspgsql-patches
On Thu, 2004-11-04 at 13:05, Bruce Momjian wrote:
> I am fine with removing it but if we don't I would like to have it
> secure, mostly from a public relations perspective.

A change which introduced two regressions and fails to materially
improve the security of the script is a curious definition of "secure"
if you ask me...

Attached is a patch that removes the make_oidjoins_check script from
"make install". Barring any objections, I'll apply it to HEAD later
today.

-Neil


Attachment: oidjoins-check-1.patch
Description: text/x-patch (216 bytes)

In response to

Responses

pgsql-hackers by date

Next:From: Tom LaneDate: 2004-11-04 05:55:42
Subject: Re: [HACKERS] Possible make_oidjoins_check Security Issue
Previous:From: Gevik BabakhaniDate: 2004-11-04 05:41:39
Subject: Re: Charset WIN1252

pgsql-patches by date

Next:From: Tom LaneDate: 2004-11-04 05:55:42
Subject: Re: [HACKERS] Possible make_oidjoins_check Security Issue
Previous:From: Euler Taveira de OliveiraDate: 2004-11-04 05:43:12
Subject: fix typos in pt_br FAQ

Privacy Policy | About PostgreSQL
Copyright © 1996-2014 The PostgreSQL Global Development Group