CVSROOT: /cvsroot
Module name: pgsql-server
Changes by: tgl(at)postgresql(dot)org 02/09/04 19:31:35
Modified files:
src/backend/libpq: auth.c be-secure.c pqcomm.c pqformat.c
src/include/libpq: libpq.h pqformat.h
Log message:
Guard against send-lots-and-lots-of-data DoS attack from unauthenticated
users, by limiting the length of string we will accept for a password.
Patch by Serguei Mokhov, some editorializing by Tom Lane.