mirror of
https://github.com/postgres/postgres.git
synced 2026-04-22 06:37:06 -04:00
fcd15f1358
Due to simplistic quoting and confusion of database names with conninfo strings, roles with the CREATEDB or CREATEROLE option could escalate to superuser privileges when a superuser next ran certain maintenance commands. The new coding rule for PQconnectdbParams() calls, documented at conninfo_array_parse(), is to pass expand_dbname=true and wrap literal database names in a trivial connection string. Escape zero-length values in appendConnStrVal(). Back-patch to 9.1 (all supported versions). Nathan Bossart, Michael Paquier, and Noah Misch. Reviewed by Peter Eisentraut. Reported by Nathan Bossart. Security: CVE-2016-5424
43 lines
1.4 KiB
Makefile
43 lines
1.4 KiB
Makefile
# src/bin/pg_upgrade/Makefile
|
|
|
|
PGFILEDESC = "pg_upgrade - an in-place binary upgrade utility"
|
|
PGAPPICON = win32
|
|
|
|
subdir = src/bin/pg_upgrade
|
|
top_builddir = ../../..
|
|
include $(top_builddir)/src/Makefile.global
|
|
|
|
OBJS = check.o controldata.o dump.o exec.o file.o function.o info.o \
|
|
option.o parallel.o pg_upgrade.o relfilenode.o server.o \
|
|
tablespace.o util.o version.o $(WIN32RES)
|
|
|
|
override CPPFLAGS := -DDLSUFFIX=\"$(DLSUFFIX)\" -I$(srcdir) -I$(libpq_srcdir) $(CPPFLAGS)
|
|
LDFLAGS += -L$(top_builddir)/src/fe_utils -lpgfeutils -lpq
|
|
|
|
|
|
all: pg_upgrade
|
|
|
|
pg_upgrade: $(OBJS) | submake-libpq submake-libpgport submake-libpgfeutils
|
|
$(CC) $(CFLAGS) $^ $(libpq_pgport) $(LDFLAGS) $(LDFLAGS_EX) $(LIBS) -o $@$(X)
|
|
|
|
install: all installdirs
|
|
$(INSTALL_PROGRAM) pg_upgrade$(X) '$(DESTDIR)$(bindir)/pg_upgrade$(X)'
|
|
|
|
installdirs:
|
|
$(MKDIR_P) '$(DESTDIR)$(bindir)'
|
|
|
|
uninstall:
|
|
rm -f '$(DESTDIR)$(bindir)/pg_upgrade$(X)'
|
|
|
|
clean distclean maintainer-clean:
|
|
rm -f pg_upgrade$(X) $(OBJS)
|
|
rm -rf analyze_new_cluster.sh delete_old_cluster.sh log/ tmp_check/ \
|
|
pg_upgrade_dump_globals.sql \
|
|
pg_upgrade_dump_*.custom pg_upgrade_*.log
|
|
|
|
check: test.sh all
|
|
MAKE=$(MAKE) bindir=$(bindir) libdir=$(libdir) EXTRA_REGRESS_OPTS="$(EXTRA_REGRESS_OPTS)" $(SHELL) $< --install
|
|
|
|
# disabled because it upsets the build farm
|
|
#installcheck: test.sh
|
|
# MAKE=$(MAKE) bindir=$(bindir) libdir=$(libdir) $(SHELL) $<
|