Re: [HACKERS] Possible make_oidjoins_check Security Issue

Neil Conway <neilc@samurai.com>

From: Neil Conway <neilc@samurai.com>

To: Bruce Momjian <pgman@candle.pha.pa.us>

Cc: Gavin Sherry <swm@linuxworld.com.au>, Tom Lane <tgl@sss.pgh.pa.us>, PostgreSQL-patches <pgsql-patches@postgresql.org>

Date: 2004-11-04T05:46:18Z

Lists: pgsql-hackers

Attachments

oidjoins-check-1.patch (text/x-patch) patch

On Thu, 2004-11-04 at 13:05, Bruce Momjian wrote:
> I am fine with removing it but if we don't I would like to have it
> secure, mostly from a public relations perspective.

A change which introduced two regressions and fails to materially
improve the security of the script is a curious definition of "secure"
if you ask me...

Attached is a patch that removes the make_oidjoins_check script from
"make install". Barring any objections, I'll apply it to HEAD later
today.

-Neil