Commit6336b6d

committed

Correct pg_recvlogical server version test.

The predecessor test boiled down to "PQserverVersion(NULL) >= 100000",which is always false. No release includes that, so it could not havereintroducedCVE-2018-1058. Back-patch to 9.4, like the addition of thepredecessor in commit8d2814f.Discussion:https://postgr.es/m/20180422215551.GB2676194@rfd.leadboat.com

1 parent5602265 commit6336b6dCopy full SHA for 6336b6d

File tree

-1

lines changed

-1

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -223,7 +223,7 @@ GetConnection(void)`
`223`	`223`	`* 10, so the search path cannot be changed (by us or attackers) on`
`224`	`224`	`* earlier versions.`
`225`	`225`	`*/`
`226`		`-if (dbname!=NULL&&PQserverVersion(conn) >=100000)`
	`226`	`+if (dbname!=NULL&&PQserverVersion(tmpconn) >=100000)`
`227`	`227`	`{`
`228`	`228`	`PGresult*res;`
`229`	`229`

Comments

(0)