Re: user authentication crash by Erik Luke (20-08-2001; 1.3kb)

From: Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>
To: "Thomas Yackel" <yackelt(at)ohsu(dot)edu>
Cc: eluke(at)cs(dot)montana(dot)edu, pgsql-bugs(at)postgresql(dot)org, pgsql-hackers(at)postgresql(dot)org, justin(at)postgresql(dot)org
Subject: Re: user authentication crash by Erik Luke (20-08-2001; 1.3kb)
Date: 2001-11-01 05:28:25
Message-ID: 20819.1004592505@sss.pgh.pa.us
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs pgsql-general pgsql-hackers

"Thomas Yackel" <yackelt(at)ohsu(dot)edu> writes:
> I got the error: "Bad abstime external representation ''" when attempted to start psql as a particular user and the postmaster shutdown.

> The problem, we discovered, is that this user had a carriage return contained within his password. Changing the password to remove the CR avoided the system shutdown.

Hmm. I can see how a linefeed in a password would create a problem (it
breaks the line-oriented formatting of the pg_pwd file). However, I
can't reproduce a postmaster crash here. Either I'm not testing the
right combination of circumstances, or current sources are more robust
about this than 7.1. That's not unlikely given that Bruce rewrote the
password-file-parsing code a couple months ago.

In any case it seems like it'd be a good idea to forbid nonprinting
characters in passwords. Comments anyone?

regards, tom lane

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Thomas Yackel 2001-11-01 06:42:16 Re: user authentication crash by Erik Luke (20-08-2001;
Previous Message Thomas Yackel 2001-10-31 20:20:24 user authentication crash by Erik Luke (20-08-2001; 1.3kb)

Browse pgsql-general by date

  From Date Subject
Next Message Uros Gruber 2001-11-01 10:49:09 RETURN in function
Previous Message Thomas Lockhart 2001-11-01 05:26:13 Re: Error in date_trunc function?

Browse pgsql-hackers by date

  From Date Subject
Next Message Tom Lane 2001-11-01 05:52:33 Re: Warnings in CVS build
Previous Message Philip Warner 2001-11-01 04:16:06 Another planner/optimizer question...