rdelaage
/
postgresql
mirror of https://git.postgresql.org/git/postgresql.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
3,433 Commits 36 Branches 606 Tags 423 MiB
C 86%
PLpgSQL 5.5%
Perl 4.1%
Yacc 1.3%
Makefile 0.7%
Other 2.3%
Go to file
Marc G. Fournier bd029bcb4a From: Tom Lane <tgl@sss.pgh.pa.us> 
The attached patches respond to discussion that was on pgsql-hackers
around the beginning of June (see thread "libpgtcl bug (and symptomatic
treatment)").  The changes are:

1. Remove code in connectDB that throws away the password after making
a connection.  This doesn't really add much security IMHO --- a bad guy
with access to your client's address space can likely extract the
password anyway, to say nothing of what he might do directly.  And
there's the serious shortcoming that it prevents PQreset() from working
if the database requires a password.

2. Fix coredump problem: fe_sendauth did not guard against being handed
a NULL password pointer.  (This is the proximate cause of the coredump-
during-PQreset problem that Magosanyi Arpad complained of last month.)

3. Remove highly questionable "error recovery" logic in libpgtcl's
pg_exec statement.

I believe the consensus of the discussion last month was in favor of
#1 and #3, but I'm just now getting around to making the change.
I realized that #2 was a bug in process of looking at the change.
 		1998-07-09 03:32:10 +00:00
contrib > Sure send it in, we can put it in contrib. > > > > > I wrote a 1998-06-16 17:53:44 +00:00
doc From: Tom Lane <tgl@sss.pgh.pa.us> 1998-07-09 03:30:49 +00:00
migration Update for 6.3.2 1998-04-07 21:01:28 +00:00
src From: Tom Lane <tgl@sss.pgh.pa.us> 1998-07-09 03:32:10 +00:00
COPYRIGHT From: David Friend <dfriend@atlsci.atlsci.com> 1997-05-11 06:18:33 +00:00
HISTORY Update HISTORY/TODO. Disable HAVING. 1998-04-17 04:12:56 +00:00
INSTALL Here are two patches to fix up the c++ (and c) support in the 1998-06-16 03:28:58 +00:00
README Update for 6.3.2 1998-04-07 21:01:28 +00:00
register.txt update to say "most advanced". 1998-06-08 16:43:15 +00:00

README 

PostgreSQL Data Base Management System (formerly known as Postgres, then
as Postgres95).
  
This directory contains the version 6.3.2 release of the PostgreSQL
database server.  The server is not ANSI SQL compliant, but it gets
closer with every release.  After you unzip and untar the distribution
file, look at file INSTALL for the installation notes and file HISTORY
for the changes.

The latest version of this software may be obtained at
ftp://ftp.postgresql.org/pub/.  For more information look at our WWW
home page located at http://www.postgreSQL.org/.

PostgreSQL is not public domain software.  It is copyrighted by the
University of California but may be used according to the licensing
terms of the the copyright below:

------------------------------------------------------------------------

POSTGRES95 Data Base Management System (formerly known as Postgres, then
as Postgres95).

Copyright (c) 1994-7 Regents of the University of California

Permission to use, copy, modify, and distribute this software and its
documentation for any purpose, without fee, and without a written agreement
is hereby granted, provided that the above copyright notice and this
paragraph and the following two paragraphs appear in all copies.

IN NO EVENT SHALL THE UNIVERSITY OF CALIFORNIA BE LIABLE TO ANY PARTY FOR
DIRECT, INDIRECT, SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES, INCLUDING
LOST PROFITS, ARISING OUT OF THE USE OF THIS SOFTWARE AND ITS
DOCUMENTATION, EVEN IF THE UNIVERSITY OF CALIFORNIA HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGE.

THE UNIVERSITY OF CALIFORNIA SPECIFICALLY DISCLAIMS ANY WARRANTIES,
INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY
AND FITNESS FOR A PARTICULAR PURPOSE.  THE SOFTWARE PROVIDED HEREUNDER IS
ON AN "AS IS" BASIS, AND THE UNIVERSITY OF CALIFORNIA HAS NO OBLIGATIONS TO
PROVIDE MAINTENANCE, SUPPORT, UPDATES, ENHANCEMENTS, OR MODIFICATIONS.