Commitc7cc9b7

committed

Correct pg_recvlogical server version test.

The predecessor test boiled down to "PQserverVersion(NULL) >= 100000",which is always false. No release includes that, so it could not havereintroducedCVE-2018-1058. Back-patch to 9.4, like the addition of thepredecessor in commit8d2814f.Discussion:https://postgr.es/m/20180422215551.GB2676194@rfd.leadboat.com

1 parent1222db9 commitc7cc9b7Copy full SHA for c7cc9b7

File tree

-1

lines changed

-1

lines changed

Lines changed: 1 addition & 1 deletion

Original file line number	Diff line number	Diff line change
`@@ -212,7 +212,7 @@ GetConnection(void)`
`212`	`212`	`* 10, so the search path cannot be changed (by us or attackers) on`
`213`	`213`	`* earlier versions.`
`214`	`214`	`*/`
`215`		`-if (dbname!=NULL&&PQserverVersion(conn) >=100000)`
	`215`	`+if (dbname!=NULL&&PQserverVersion(tmpconn) >=100000)`
`216`	`216`	`{`
`217`	`217`	`PGresult*res;`
`218`	`218`

Comments

(0)