Re: CVE-2017-7484-induced bugs, or, btree cmp functions are not leakproof?

Amit Langote <amitlangote09@gmail.com>

From: Amit Langote <amitlangote09@gmail.com>

To: Alvaro Herrera <alvherre@2ndquadrant.com>

Cc: Tom Lane <tgl@sss.pgh.pa.us>, Dilip Kumar <dilipbalaut@gmail.com>, Amit Langote <Langote_Amit_f8@lab.ntt.co.jp>, Peter Eisentraut <peter.eisentraut@2ndquadrant.com>, PostgreSQL Hackers <pgsql-hackers@lists.postgresql.org>

Date: 2019-09-26T01:18:29Z

Lists: pgsql-hackers

Attachments

v6-0001-Use-root-parent-s-permissions-when-reading-child-.patch (application/octet-stream) patch v6-0001

On Thu, Sep 26, 2019 at 5:15 AM Alvaro Herrera <alvherre@2ndquadrant.com> wrote:
> Travis complains that this patch adds a new compile warning.  Please
> fix.

Thanks, updated patch attached.

Regards,
Amit

Commits

Allow access to child table statistics if user can read parent table.
- 553d2ec2710b 13.0 landed
- 21a4edd1281d 12.2 landed
- 1d9056f563f3 11.7 landed
Mark built-in btree comparison functions as leakproof where it's safe.
- 39a96512b3ed 12.0 landed