Tom Lane e5fdb8fead Make REPLICATION privilege checks test current user not authenticated user. ...

The pg_start_backup() and pg_stop_backup() functions checked the privileges
of the initially-authenticated user rather than the current user, which is
wrong.  For example, a user-defined index function could successfully call
these functions when executed by ANALYZE within autovacuum.  This could
allow an attacker with valid but low-privilege database access to interfere
with creation of routine backups.  Reported and fixed by Noah Misch.

Security: CVE-2013-1901

2013-04-01 13:09:29 -04:00

..

adt

Fix to_char() to use ASCII-only case-folding rules where appropriate.

2013-03-05 13:02:35 -05:00

cache

Fix error-checking typo in check_TSCurrentConfig().

2013-01-20 23:10:00 -05:00

error

Run pgindent on 9.2 source tree in preparation for first 9.3

2012-06-10 15:20:04 -04:00

fmgr

Run pgindent on 9.2 source tree in preparation for first 9.3

2012-06-10 15:20:04 -04:00

hash

Add defenses against integer overflow in dynahash numbuckets calculations.

2012-12-11 22:09:12 -05:00

init

Make REPLICATION privilege checks test current user not authenticated user.

2013-04-01 13:09:29 -04:00

mb

Back-patch addition of pg_wchar-to-multibyte conversion functionality.

2012-07-10 16:52:36 -04:00

misc

Reset vacuum_defer_cleanup_age to PGC_SIGHUP.

2013-02-04 16:41:37 +00:00

mmgr

Run pgindent on 9.2 source tree in preparation for first 9.3

2012-06-10 15:20:04 -04:00

resowner

Update copyright notices for year 2012.

2012-01-01 18:01:58 -05:00

sort

Run newly-configured perltidy script on Perl files.

2012-07-04 21:47:48 -04:00

time

Assorted message style improvements

2012-07-02 21:13:28 +03:00

.gitignore

Avoid maintaining three separate copies of the error codes list.

2011-02-03 22:32:49 -05:00

errcodes.txt

Update copyright notices for year 2012.

2012-01-01 18:01:58 -05:00

Gen_dummy_probes.sed

Update copyright notices for year 2012.

2012-01-01 18:01:58 -05:00

Gen_fmgrtab.pl

Run updated copyright.pl on HEAD and 9.2 trees, updating the psql

2012-07-06 12:28:18 -04:00

generate-errcodes.pl

Run newly-configured perltidy script on Perl files.

2012-07-04 21:47:48 -04:00

Makefile

Make handling of errcodes.h more consistent with other generated headers.

2011-02-04 09:29:10 -05:00

probes.d

Make group commit more effective.

2012-01-30 16:53:48 +02:00