NotificationsYou must be signed in to change notification settings
Fork6
Star31

Commite7d3a37

committed

Fix pg_recvlogical for pre-10 versions

Ine170b8c, protection against modified search_path was added. However,PostgreSQL versions prior to 10 does not accept SQL commands over areplication connection, so the protection would generate a syntax error.Since we cannot run SQL commands on it, we are also not vulnerable tothe issue thate170b8c fixes, so we can just skip this command forolder versions.Author: Michael Paquier <michael@paquier.xyz>

1 parent04c76ac commite7d3a37Copy full SHA for e7d3a37

File tree

1 file changed

-2

lines changed

src/bin/pg_basebackup
- streamutil.c

1 file changed

-2

lines changed

`‎src/bin/pg_basebackup/streamutil.c`

Lines changed: 7 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -206,8 +206,13 @@ GetConnection(void)`
`206`	`206`	`if (conn_opts)`
`207`	`207`	`PQconninfoFree(conn_opts);`
`208`	`208`
`209`		`-/* Set always-secure search path, so malicious users can't get control. */`
`210`		`-if (dbname!=NULL)`
	`209`	`+/*`
	`210`	`+ * Set always-secure search path, so malicious users can't get control.`
	`211`	`+ * The capacity to run normal SQL queries was added in PostgreSQL`
	`212`	`+ * 10, so the search path cannot be changed (by us or attackers) on`
	`213`	`+ * earlier versions.`
	`214`	`+ */`
	`215`	`+if (dbname!=NULL&&PQserverVersion(conn) >=100000)`
`211`	`216`	`{`
`212`	`217`	`PGresult*res;`
`213`	`218`

0 commit comments

Comments

(0)

Movatterモバイル変換

Navigation Menu

Search code, repositories, users, issues, pull requests...

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Commite7d3a37

File tree

1 file changed

1 file changed

`‎src/bin/pg_basebackup/streamutil.c`

0 commit comments