Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

CVE-2020-14350#222

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Merged
arssher merged 1 commit intopostgrespro:masterfromkulaginm:CVE-2020-14350
Nov 8, 2020
Merged

Conversation

kulaginm
Copy link
Member

Fix forCVE-2020-14350 (https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-14350)
See also Postgres commit 7eeb1d986.

Thanks to Alexander Lakhin.

@codecov
Copy link

codecovbot commentedOct 27, 2020
edited
Loading

Codecov Report

Merging#222 (ef0831a) intomaster (bf13f4a) willnot change coverage.
The diff coverage is100.00%.

Impacted file tree graph

@@           Coverage Diff           @@##           master     #222   +/-   ##=======================================  Coverage   91.87%   91.87%           =======================================  Files          40       40             Lines        7052     7052           =======================================  Hits         6479     6479             Misses        573      573
Impacted FilesCoverage Δ
src/partition_creation.c96.85% <ø> (ø)
src/pathman_workers.c84.03% <100.00%> (ø)

Continue to review full report at Codecov.

Legend -Click here to learn more
Δ = absolute <relative> (impact),ø = not affected,? = missing data
Powered byCodecov. Last updatebf13f4a...e0171c8. Read thecomment docs.

- Explicit casts to ensure exact match to pathman functions instead of pwning ones.- Explicit use of @extschema@ and pg_catalog schemas where possible (except for  operators).- Replace unsafe OR REPLACE clause.This is believed to remove the possibility of malicious internal functions overloading.For more information, see the documentation:37.17.6.2. Security Considerations for Extension Scripts (https://www.postgresql.org/docs/current/extend-extensions.html#EXTEND-EXTENSIONS-SECURITY)5.9.6. Usage Patterns (https://www.postgresql.org/docs/current/ddl-schemas.html#DDL-SCHEMAS-PATTERNS)
@arssher
Copy link
Contributor

arssher commentedNov 8, 2020
edited
Loading

I've reworded the readme and commit message bit.

@arssherarssher merged commitc72d688 intopostgrespro:masterNov 8, 2020
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Reviewers
No reviews
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

2 participants
@kulaginm@arssher

[8]ページ先頭

©2009-2025 Movatter.jp