mirror of
https://git.postgresql.org/git/postgresql.git
synced 2024-09-11 01:33:22 +02:00
brin_page_type() and brin_metapage_info() did not enforce being called by superuser, like other pageinspect functions that take bytea do. Since they don't verify the passed page thoroughly, it is possible to use them to read the server memory with a carefully crafted bytea value, up to a file kilobytes from where the input bytea is located. Have them throw errors if called by a non-superuser. Report and initial patch: Andreas Seltenreich Security: CVE-2016-3065 |
||
---|---|---|
.. | ||
brinfuncs.c | ||
btreefuncs.c | ||
fsmfuncs.c | ||
ginfuncs.c | ||
heapfuncs.c | ||
Makefile | ||
pageinspect--1.0--1.1.sql | ||
pageinspect--1.1--1.2.sql | ||
pageinspect--1.2--1.3.sql | ||
pageinspect--1.3--1.4.sql | ||
pageinspect--1.4.sql | ||
pageinspect--unpackaged--1.0.sql | ||
pageinspect.control | ||
rawpage.c |