Re: Securing "make check" (CVE-2014-0067)

Alvaro Herrera <alvherre@2ndquadrant.com>

From: Alvaro Herrera <alvherre@2ndquadrant.com>

To: Noah Misch <noah@leadboat.com>

Cc: pgsql-hackers@postgresql.org

Date: 2014-03-01T15:48:08Z

Lists: pgsql-hackers

I didn't check the patch in detail, but it seems to me that both the
encode stuff as well as pgrand belong in src/common rather than
src/port.

-- 
Álvaro Herrera                http://www.2ndQuadrant.com/
PostgreSQL Development, 24x7 Support, Training & Services

Commits

Same data as JSON: GET /api/v1/messages/:b64id/commits the thread's linked commits as JSON, with link sources. API reference →

Have config_sspi_auth() permit IPv6 localhost connections.
- 8d9cb0bc4834 9.5.0 cited
Lock down regression testing temporary clusters on Windows.
- f6dc6dd5ba54 9.5.0 cited
Use a separate temporary directory for the Unix-domain socket
- f545d233ebce 9.5.0 cited
Secure Unix-domain sockets of "make check" temporary clusters.
- be76a6d39e28 9.5.0 cited