]> granicus.if.org Git - postgresql/commit
The original patch to disallow non-passworded connections to non-superusers
authorTom Lane <tgl@sss.pgh.pa.us>
Thu, 3 Jan 2008 21:28:42 +0000 (21:28 +0000)
committerTom Lane <tgl@sss.pgh.pa.us>
Thu, 3 Jan 2008 21:28:42 +0000 (21:28 +0000)
commitf39ff783bc147db38136b4f144c3388a7b8305a7
tree15984ff352e4e48997e3c6bdc445593087016231
parent108b19d8609af994f8fa69cd0d8e15a2807a1367
The original patch to disallow non-passworded connections to non-superusers
failed to cover all the ways in which a connection can be initiated in dblink.
Plug the remaining holes.  Also, disallow transient connections in functions
for which that feature makes no sense (because they are only sensible as
part of a sequence of operations on the same connection).  Joe Conway

Security: CVE-2007-6601
contrib/dblink/dblink.c