Re: Git cvsserver serious issue

From: Peter Eisentraut <peter_e(at)gmx(dot)net>
To: Magnus Hagander <magnus(at)hagander(dot)net>
Cc: PostgreSQL-development <pgsql-hackers(at)postgresql(dot)org>
Subject: Re: Git cvsserver serious issue
Date: 2010-09-22 16:21:45
Message-ID: 1285172505.15691.55.camel@vanquo.pezone.net
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: buildfarm-members pgsql-hackers

On ons, 2010-09-22 at 16:03 +0200, Magnus Hagander wrote:
> That basically means that git-cvsserver is completely useless in a
> public scenario as it stands. An easier way to DOS our server is hard
> to find, really.
>
> Now, if we can limit this by IP address, that would be ok. I assume we
> can do this for the NLS stuff - peter?

Well, let's see. If someone can figure out the git equivalent of

if cvs -q update | egrep -q '^(U|P) '; then
# ... something changed, so run the update ...
fi

(assuming, for simplicity, that the current directory has the
appropriate branch checked out already)

then I might be able to get this fixed.

In response to

Responses

Browse buildfarm-members by date

  From Date Subject
Next Message Robert Haas 2010-09-22 16:42:17 Re: Git cvsserver serious issue
Previous Message Tom Lane 2010-09-22 15:07:40 Re: Git cvsserver serious issue

Browse pgsql-hackers by date

  From Date Subject
Next Message Bruce Momjian 2010-09-22 16:23:54 Re: Configuring synchronous replication
Previous Message Bruce Momjian 2010-09-22 16:17:08 Re: Any reason why the default_with_oids GUC is still there?