Commit4bed8ac

committed

Unset PG_CIPHER_KEY environment variable to prevent access to it by non-priveleged users through pgperl

1 parent879707f commit4bed8acCopy full SHA for 4bed8ac

File tree

-0

lines changed

-0

lines changed

Lines changed: 1 addition & 0 deletions

Original file line number	Diff line number	Diff line change
`@@ -238,6 +238,7 @@ static void cfs_rc4_init(void)`
`238`	`238`	`if (cipher_key==NULL) {`
`239`	`239`	`elog(ERROR,"PG_CIPHER_KEY environment variable is not set");`
`240`	`240`	`}`
	`241`	`+unsetenv("PG_CIPHER_KEY");/* make it not possible to inspect this environment variable through plperl */`
`241`	`242`	`key_length=strlen(cipher_key);`
`242`	`243`	`for (i=0;i<CFS_CIPHER_KEY_SIZE;++i) {`
`243`	`244`	`rc4_init_state[i]= (uint8)i;`

Comments

(0)