postgresql/src/backend
Tom Lane 226a980bb0 Fix bug that allowed any logged-in user to SET ROLE to any other database user
id (CVE-2006-0553).  Also fix related bug in SET SESSION AUTHORIZATION that
allows unprivileged users to crash the server, if it has been compiled with
Asserts enabled.  The escalation-of-privilege risk exists only in 8.1.0-8.1.2.
However, the Assert-crash risk exists in all releases back to 7.3.
Thanks to Akio Ishida for reporting this problem.
2006-02-12 22:32:43 +00:00
..
access Actually there's a better way to do this, which is to count tuples 2006-02-12 00:18:17 +00:00
bootstrap Make all command-line options of postmaster and postgres the same. See 2006-01-05 10:07:46 +00:00
catalog Revert patch becaues of locking concerns: 2006-02-12 19:11:01 +00:00
commands Fix bug that allowed any logged-in user to SET ROLE to any other database user 2006-02-12 22:32:43 +00:00
executor Improve my initial, rather hacky implementation of joins to append 2006-02-05 02:59:17 +00:00
lib Standard pgindent run for 8.1. 2005-10-15 02:49:52 +00:00
libpq Fix unportable usage of socklen_t: should use ACCEPT_TYPE_ARG3 macro 2006-01-24 16:38:42 +00:00
main Set progname early in the postmaster/postgres binary, rather than doing 2006-02-01 00:31:59 +00:00
nodes DROP IF EXISTS for ROLE/USER/GROUP 2006-02-04 19:06:47 +00:00
optimizer Improve the tests to see if ScalarArrayOpExpr is strict. Original coding 2006-02-06 22:21:12 +00:00
parser Revert patch becaues of locking concerns: 2006-02-12 19:11:01 +00:00
po Remove DOS line endings ("\r\n") from several .po files. DOS line endings 2006-01-01 10:13:56 +00:00
port Check that SID is enabled while checking for Windows admin privileges. 2006-02-10 21:52:21 +00:00
postmaster Add code comment about Linux stack randomization and shared memory. 2006-02-01 16:00:06 +00:00
regex Re-run pgindent, fixing a problem where comment lines after a blank 2005-11-22 18:17:34 +00:00
rewrite Restructure planner's handling of inheritance. Rather than processing 2006-01-31 21:39:25 +00:00
storage Add contrib/pg_freespacemap to display free space map information. 2006-02-12 03:55:53 +00:00
tcop Revert patch becaues of locking concerns: 2006-02-12 19:11:01 +00:00
utils Fix bug that allowed any logged-in user to SET ROLE to any other database user 2006-02-12 22:32:43 +00:00
Makefile Remove QNX port. 2006-01-05 01:56:30 +00:00
nls.mk Add _ to gettext triggers. Must have been forgotten here when it was introduced. 2005-10-04 11:14:03 +00:00