Re: I am done

Serguei A. Mokhov wrote:
>
>
> On Mon, 2 Sep 2002, Tom Lane wrote:
>
> > Date: Mon, 02 Sep 2002 10:33:49 -0400
> > From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
> > To: Christopher Kings-Lynne <chriskl(at)familyhealth(dot)com(dot)au>
> > Cc: Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us>,
> > PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
> > Subject: Re: [HACKERS] I am done
> >
> > "Christopher Kings-Lynne" <chriskl(at)familyhealth(dot)com(dot)au> writes:
> > > You can probably nail some TODOs:
> >
>
> Maybe add a TODO item:
>
> * fix a possibility of DoS attacks in the backend before the user is
> authenticated
>
> ? Since I guess my patch for that is too late and I don't even know if
> it's any good approach at all.

It is a security issue and will have to be fixed before 7.3 final, one
way or the other.

--
Bruce Momjian | http://candle.pha.pa.us
pgman(at)candle(dot)pha(dot)pa(dot)us | (610) 359-1001
+ If your life is a hard drive, | 13 Roberts Road
+ Christ can be your backup. | Newtown Square, Pennsylvania 19073