Tom Lane 89e0bac86d Convert newlines to spaces in names written in pg_dump comments. ...

pg_dump was incautious about sanitizing object names that are emitted
within SQL comments in its output script.  A name containing a newline
would at least render the script syntactically incorrect.  Maliciously
crafted object names could present a SQL injection risk when the script
is reloaded.

Reported by Heikki Linnakangas, patch by Robert Haas

Security: CVE-2012-0868

2012-02-23 15:53:09 -05:00

..

backend

Remove arbitrary limitation on length of common name in SSL certificates.

2012-02-23 15:48:04 -05:00

bin

Convert newlines to spaces in names written in pg_dump comments.

2012-02-23 15:53:09 -05:00

include

Remove arbitrary limitation on length of common name in SSL certificates.

2012-02-23 15:48:04 -05:00

interfaces

Remove arbitrary limitation on length of common name in SSL certificates.

2012-02-23 15:48:04 -05:00

makefiles

Add pg_upgrade test suite

2011-11-27 22:42:32 +02:00

pl

Fix I/O-conversion-related memory leaks in plpgsql.

2012-02-11 18:06:24 -05:00

port

Speed up in-memory tuplesorting.

2012-02-15 12:13:32 -05:00

template

Remove cvs keywords from all files.

2010-09-20 22:08:53 +02:00

test

pg_regress: Add application name setting

2012-02-21 16:45:19 +02:00

timezone

Update copyright notices for year 2012.

2012-01-01 18:01:58 -05:00

tools

Speed up in-memory tuplesorting.

2012-02-15 12:13:32 -05:00

tutorial

Update copyright notices for year 2012.

2012-01-01 18:01:58 -05:00

.gitignore

Convert cvsignore to gitignore, and add .gitignore for build targets.

2010-09-22 12:57:04 +02:00

bcc32.mak

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

DEVELOPERS

…

Makefile

Fix some oversights in distprep and maintainer-clean targets.

2011-03-10 00:04:05 -05:00

Makefile.global.in

ecpg: Improve test building

2012-02-02 20:33:29 +02:00

Makefile.shlib

Use single quotes in preference to double quotes for protecting pathnames.

2011-06-15 21:45:23 -04:00

nls-global.mk

Sort compendium lists for msgmerge

2011-12-27 20:22:51 +02:00

win32.mak

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00