Commit32c2476

committed

Correct pg_recvlogical server version test.

The predecessor test boiled down to "PQserverVersion(NULL) >= 100000",which is always false. No release includes that, so it could not havereintroducedCVE-2018-1058. Back-patch to 9.4, like the addition of thepredecessor in commit8d2814f.Discussion:https://postgr.es/m/20180422215551.GB2676194@rfd.leadboat.com

1 parentc76d0ee commit32c2476Copy full SHA for 32c2476

File tree

-1

lines changed

-1

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -215,7 +215,7 @@ GetConnection(void)`
`215`	`215`	`* 10, so the search path cannot be changed (by us or attackers) on`
`216`	`216`	`* earlier versions.`
`217`	`217`	`*/`
`218`		`-if (dbname!=NULL&&PQserverVersion(conn) >=100000)`
	`218`	`+if (dbname!=NULL&&PQserverVersion(tmpconn) >=100000)`
`219`	`219`	`{`
`220`	`220`	`PGresult*res;`
`221`	`221`

Comments

(0)