postgresql/src/include/libpq
Tom Lane ae20b23a9e Refactor permissions checks for large objects.
Up to now, ACL checks for large objects happened at the level of
the SQL-callable functions, which led to CVE-2017-7548 because of a
missing check.  Push them down to be enforced in inv_api.c as much
as possible, in hopes of preventing future bugs.  This does have the
effect of moving read and write permission errors to happen at lo_open
time not loread or lowrite time, but that seems acceptable.

Michael Paquier and Tom Lane

Discussion: https://postgr.es/m/CAB7nPqRHmNOYbETnc_2EjsuzSM00Z+BWKv9sy6tnvSd5gWT_JA@mail.gmail.com
2017-11-09 12:56:07 -05:00
..
auth.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
be-fsstubs.h Refactor permissions checks for large objects. 2017-11-09 12:56:07 -05:00
crypt.h Remove support for password_encryption='off' / 'plain'. 2017-05-08 11:26:07 +03:00
hba.h Allow custom search filters to be configured for LDAP auth 2017-09-12 09:49:04 -04:00
ifaddr.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
libpq-be.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
libpq-fs.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
libpq.h Always use 2048 bit DH parameters for OpenSSL ephemeral DH ciphers. 2017-07-31 22:36:09 +03:00
pqcomm.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
pqformat.h Rely on sizeof(typename) rather than sizeof(variable) in pqformat.h. 2017-10-13 11:46:05 -04:00
pqmq.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
pqsignal.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00
scram.h Phase 2 of pgindent updates. 2017-06-21 15:19:25 -04:00