Re: [SECURITY] DoS attack on backend possible

From: Rod Taylor <rbt(at)zort(dot)ca>
To: Florian Weimer <Weimer(at)CERT(dot)Uni-Stuttgart(dot)DE>
Cc: Justin Clift <justin(at)postgresql(dot)org>, PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: [SECURITY] DoS attack on backend possible
Date: 2002-08-19 17:17:54
Message-ID: 1029777475.84807.1.camel@jester
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers pgsql-hackers

On Mon, 2002-08-19 at 13:14, Florian Weimer wrote:
> Justin Clift <justin(at)postgresql(dot)org> writes:
>
> > You guys *definitely* write scarey code.
>
> Yes, indeed. My code has a lot of unnecessary and error-prone input
> validation checks because I don't trust the PostgreSQL parser.

Bah.. Check the datatype is close and send it in.

Would be much easier to capture database errors if you didn't have to
base all error matches on regular expressions (error codes will be
nice).

In response to

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2002-08-19 18:33:42 Re: [SECURITY] DoS attack on backend possible
Previous Message Florian Weimer 2002-08-19 17:14:18 Re: [SECURITY] DoS attack on backend possible

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2002-08-19 18:24:08 Re: @(#) Mordred Labs advisory 0x0001: Buffer overflow in
Previous Message Florian Weimer 2002-08-19 17:14:18 Re: [SECURITY] DoS attack on backend possible