diff options
| author | Tom Lane | 2006-02-12 22:32:43 +0000 |
|---|---|---|
| committer | Tom Lane | 2006-02-12 22:32:43 +0000 |
| commit | 226a980bb0dfaaa4cee3650889218483aa9ec632 (patch) | |
| tree | 8a8df23e3b21ed9d377b5805bfaaa372e3a074e4 /src/backend/utils/mb/encnames.c | |
| parent | 2a5180c26e4769171a64cbc6827488fbcf349e38 (diff) | |
Fix bug that allowed any logged-in user to SET ROLE to any other database user
id (CVE-2006-0553). Also fix related bug in SET SESSION AUTHORIZATION that
allows unprivileged users to crash the server, if it has been compiled with
Asserts enabled. The escalation-of-privilege risk exists only in 8.1.0-8.1.2.
However, the Assert-crash risk exists in all releases back to 7.3.
Thanks to Akio Ishida for reporting this problem.
Diffstat (limited to 'src/backend/utils/mb/encnames.c')
| -rw-r--r-- | src/backend/utils/mb/encnames.c | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/src/backend/utils/mb/encnames.c b/src/backend/utils/mb/encnames.c index 0c5eaec66cc..45427768132 100644 --- a/src/backend/utils/mb/encnames.c +++ b/src/backend/utils/mb/encnames.c @@ -2,7 +2,7 @@ * Encoding names and routines for work with it. All * in this file is shared bedween FE and BE. * - * $PostgreSQL: pgsql/src/backend/utils/mb/encnames.c,v 1.27 2006/01/11 08:43:12 neilc Exp $ + * $PostgreSQL: pgsql/src/backend/utils/mb/encnames.c,v 1.28 2006/02/12 22:32:42 tgl Exp $ */ #ifdef FRONTEND #include "postgres_fe.h" @@ -449,7 +449,7 @@ pg_char_to_encname_struct(const char *name) if (name == NULL || *name == '\0') return NULL; - if (strlen(name) > NAMEDATALEN) + if (strlen(name) >= NAMEDATALEN) { #ifdef FRONTEND fprintf(stderr, "encoding name too long\n"); |