postgresql/src/backend/storage
Tom Lane ae20b23a9e Refactor permissions checks for large objects.
Up to now, ACL checks for large objects happened at the level of
the SQL-callable functions, which led to CVE-2017-7548 because of a
missing check.  Push them down to be enforced in inv_api.c as much
as possible, in hopes of preventing future bugs.  This does have the
effect of moving read and write permission errors to happen at lo_open
time not loread or lowrite time, but that seems acceptable.

Michael Paquier and Tom Lane

Discussion: https://postgr.es/m/CAB7nPqRHmNOYbETnc_2EjsuzSM00Z+BWKv9sy6tnvSd5gWT_JA@mail.gmail.com
2017-11-09 12:56:07 -05:00
..
buffer Fix two violations of the ResourceOwnerEnlarge/Remember protocol. 2017-11-08 16:50:12 -05:00
file Fix two violations of the ResourceOwnerEnlarge/Remember protocol. 2017-11-08 16:50:12 -05:00
freespace Update copyright via script for 2017 2017-01-03 13:48:53 -05:00
ipc Change TRUE/FALSE to true/false 2017-11-08 11:37:28 -05:00
large_object Refactor permissions checks for large objects. 2017-11-09 12:56:07 -05:00
lmgr Change TRUE/FALSE to true/false 2017-11-08 11:37:28 -05:00
page Avoid looping through line pointers twice in PageRepairFragmentation(). 2017-11-03 17:21:59 -04:00
smgr Refactor new file permission handling 2017-09-23 10:16:18 -04:00
Makefile Remove cvs keywords from all files. 2010-09-20 22:08:53 +02:00