From: | tgl(at)postgresql(dot)org (Tom Lane) |
---|---|
To: | pgsql-committers(at)postgresql(dot)org |
Subject: | pgsql: Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside |
Date: | 2009-09-03 22:08:14 |
Message-ID: | 20090903220814.77DD4753FB7@cvs.postgresql.org |
Views: | Raw Message | Whole Thread | Download mbox | Resend email |
Thread: | |
Lists: | pgsql-committers |
Log Message:
-----------
Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside security-definer
functions.
This extends the previous patch that forbade SETting these variables inside
security-definer functions. RESET is equally a security hole, since it
would allow regaining privileges of the caller; furthermore it can trigger
Assert failures and perhaps other internal errors, since the code is not
expecting these variables to change in such contexts. The previous patch
did not cover this case because assign hooks don't really have enough
information, so move the responsibility for preventing this into guc.c.
Problem discovered by Heikki Linnakangas.
Security: no CVE assigned yet, extends CVE-2007-6600
Tags:
----
REL8_4_STABLE
Modified Files:
--------------
pgsql/src/backend/commands:
variable.c (r1.130 -> r1.130.2.1)
(http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/backend/commands/variable.c?r1=1.130&r2=1.130.2.1)
pgsql/src/backend/utils/misc:
guc.c (r1.505.2.1 -> r1.505.2.2)
(http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/backend/utils/misc/guc.c?r1=1.505.2.1&r2=1.505.2.2)
pgsql/src/include/utils:
guc.h (r1.102 -> r1.102.2.1)
(http://anoncvs.postgresql.org/cvsweb.cgi/pgsql/src/include/utils/guc.h?r1=1.102&r2=1.102.2.1)
From | Date | Subject | |
---|---|---|---|
Next Message | Tom Lane | 2009-09-03 22:08:23 | pgsql: Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside |
Previous Message | Tom Lane | 2009-09-03 22:08:05 | pgsql: Disallow RESET ROLE and RESET SESSION AUTHORIZATION inside |