Movatterモバイル変換

[0]ホーム
URL:

Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

 Sign up
Appearance settings

Commitdc73787

Browse files
committed
Parallel workers use AuthenticatedUserId for connection privilege checks.
Commit5a2fed9 had an unexpected side-effect: the parallel workerlaunched for the new test case would fail if it couldn't use asuperuser-reserved connection slot. The reason that test failedwhile all our pre-existing ones worked is that the connectionprivilege tests in InitPostgres had been based on the superusernessof the leader's AuthenticatedUserId, but after the rearrangementsof5a2fed9 we were testing the superuserness of CurrentUserId,which the new test case deliberately made to be a non-superuser.This all seems very accidental and probably not the behavior we reallywant, but a security patch is no time to be redesigning things.Pending some discussion about desirable semantics, hack it so thatInitPostgres continues to pay attention to the superuserness ofAuthenticatedUserId when starting a parallel worker.Nathan Bossart and Tom Lane, per buildfarm member sawshark.Security:CVE-2024-10978
1 parent0bd9560 commitdc73787

File tree

1 file changed

+18
-1
lines changed

1 file changed

+18
-1
lines changed

‎src/backend/utils/init/postinit.c

Lines changed: 18 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -22,6 +22,7 @@
2222
#include"access/genam.h"
2323
#include"access/heapam.h"
2424
#include"access/htup_details.h"
25+
#include"access/parallel.h"
2526
#include"access/session.h"
2627
#include"access/sysattr.h"
2728
#include"access/tableam.h"
@@ -762,7 +763,23 @@ InitPostgres(const char *in_dbname, Oid dboid, const char *username,
762763
else
763764
{
764765
InitializeSessionUserId(username,useroid);
765-
am_superuser=superuser();
766+
767+
/*
768+
* In a parallel worker, set am_superuser based on the
769+
* authenticated user ID, not the current role. This is pretty
770+
* dubious but it matches our historical behavior. Note that this
771+
* value of am_superuser is used only for connection-privilege
772+
* checks here and in CheckMyDatabase (we won't reach
773+
* process_startup_options in a background worker).
774+
*
775+
* In other cases, there's been no opportunity for the current
776+
* role to diverge from the authenticated user ID yet, so we can
777+
* just rely on superuser() and avoid an extra catalog lookup.
778+
*/
779+
if (InitializingParallelWorker)
780+
am_superuser=superuser_arg(GetAuthenticatedUserId());
781+
else
782+
am_superuser=superuser();
766783
}
767784
}
768785
else

0 commit comments

Comments
 (0)
[8]ページ先頭
©2009-2025 Movatter.jp