mirror of
https://github.com/postgres/postgres.git
synced 2026-04-15 22:10:45 -04:00
d1bd26740a
The server collects up to a bufferload of data whenever it reads data from the client socket. When SSL or GSS encryption is requested during startup, any additional data received with the initial request message remained in the buffer, and would be treated as already-decrypted data once the encryption handshake completed. Thus, a man-in-the-middle with the ability to inject data into the TCP connection could stuff some cleartext data into the start of a supposedly encryption-protected database session. This could be abused to send faked SQL commands to the server, although that would only work if the server did not demand any authentication data. (However, a server relying on SSL certificate authentication might well not do so.) To fix, throw a protocol-violation error if the internal buffer is not empty after the encryption handshake. Our thanks to Jacob Champion for reporting this problem. Security: CVE-2021-23214
134 lines
3.9 KiB
C
134 lines
3.9 KiB
C
/*-------------------------------------------------------------------------
|
|
*
|
|
* libpq.h
|
|
* POSTGRES LIBPQ buffer structure definitions.
|
|
*
|
|
*
|
|
* Portions Copyright (c) 1996-2019, PostgreSQL Global Development Group
|
|
* Portions Copyright (c) 1994, Regents of the University of California
|
|
*
|
|
* src/include/libpq/libpq.h
|
|
*
|
|
*-------------------------------------------------------------------------
|
|
*/
|
|
#ifndef LIBPQ_H
|
|
#define LIBPQ_H
|
|
|
|
#include <netinet/in.h>
|
|
|
|
#include "lib/stringinfo.h"
|
|
#include "libpq/libpq-be.h"
|
|
#include "storage/latch.h"
|
|
|
|
|
|
typedef struct
|
|
{
|
|
void (*comm_reset) (void);
|
|
int (*flush) (void);
|
|
int (*flush_if_writable) (void);
|
|
bool (*is_send_pending) (void);
|
|
int (*putmessage) (char msgtype, const char *s, size_t len);
|
|
void (*putmessage_noblock) (char msgtype, const char *s, size_t len);
|
|
void (*startcopyout) (void);
|
|
void (*endcopyout) (bool errorAbort);
|
|
} PQcommMethods;
|
|
|
|
extern const PGDLLIMPORT PQcommMethods *PqCommMethods;
|
|
|
|
#define pq_comm_reset() (PqCommMethods->comm_reset())
|
|
#define pq_flush() (PqCommMethods->flush())
|
|
#define pq_flush_if_writable() (PqCommMethods->flush_if_writable())
|
|
#define pq_is_send_pending() (PqCommMethods->is_send_pending())
|
|
#define pq_putmessage(msgtype, s, len) \
|
|
(PqCommMethods->putmessage(msgtype, s, len))
|
|
#define pq_putmessage_noblock(msgtype, s, len) \
|
|
(PqCommMethods->putmessage_noblock(msgtype, s, len))
|
|
#define pq_startcopyout() (PqCommMethods->startcopyout())
|
|
#define pq_endcopyout(errorAbort) (PqCommMethods->endcopyout(errorAbort))
|
|
|
|
/*
|
|
* External functions.
|
|
*/
|
|
|
|
/*
|
|
* prototypes for functions in pqcomm.c
|
|
*/
|
|
extern WaitEventSet *FeBeWaitSet;
|
|
|
|
extern int StreamServerPort(int family, char *hostName,
|
|
unsigned short portNumber, char *unixSocketDir,
|
|
pgsocket ListenSocket[], int MaxListen);
|
|
extern int StreamConnection(pgsocket server_fd, Port *port);
|
|
extern void StreamClose(pgsocket sock);
|
|
extern void TouchSocketFiles(void);
|
|
extern void RemoveSocketFiles(void);
|
|
extern void pq_init(void);
|
|
extern int pq_getbytes(char *s, size_t len);
|
|
extern int pq_getstring(StringInfo s);
|
|
extern void pq_startmsgread(void);
|
|
extern void pq_endmsgread(void);
|
|
extern bool pq_is_reading_msg(void);
|
|
extern int pq_getmessage(StringInfo s, int maxlen);
|
|
extern int pq_getbyte(void);
|
|
extern int pq_peekbyte(void);
|
|
extern int pq_getbyte_if_available(unsigned char *c);
|
|
extern bool pq_buffer_has_data(void);
|
|
extern int pq_putbytes(const char *s, size_t len);
|
|
|
|
/*
|
|
* prototypes for functions in be-secure.c
|
|
*/
|
|
extern char *ssl_library;
|
|
extern char *ssl_cert_file;
|
|
extern char *ssl_key_file;
|
|
extern char *ssl_ca_file;
|
|
extern char *ssl_crl_file;
|
|
extern char *ssl_dh_params_file;
|
|
extern char *ssl_passphrase_command;
|
|
extern bool ssl_passphrase_command_supports_reload;
|
|
#ifdef USE_SSL
|
|
extern bool ssl_loaded_verify_locations;
|
|
#endif
|
|
|
|
extern int secure_initialize(bool isServerStart);
|
|
extern bool secure_loaded_verify_locations(void);
|
|
extern void secure_destroy(void);
|
|
extern int secure_open_server(Port *port);
|
|
extern void secure_close(Port *port);
|
|
extern ssize_t secure_read(Port *port, void *ptr, size_t len);
|
|
extern ssize_t secure_write(Port *port, void *ptr, size_t len);
|
|
extern ssize_t secure_raw_read(Port *port, void *ptr, size_t len);
|
|
extern ssize_t secure_raw_write(Port *port, const void *ptr, size_t len);
|
|
|
|
/*
|
|
* prototypes for functions in be-secure-gssapi.c
|
|
*/
|
|
#ifdef ENABLE_GSS
|
|
extern ssize_t secure_open_gssapi(Port *port);
|
|
#endif
|
|
|
|
/* GUCs */
|
|
extern char *SSLCipherSuites;
|
|
extern char *SSLECDHCurve;
|
|
extern bool SSLPreferServerCiphers;
|
|
extern int ssl_min_protocol_version;
|
|
extern int ssl_max_protocol_version;
|
|
|
|
enum ssl_protocol_versions
|
|
{
|
|
PG_TLS_ANY = 0,
|
|
PG_TLS1_VERSION,
|
|
PG_TLS1_1_VERSION,
|
|
PG_TLS1_2_VERSION,
|
|
PG_TLS1_3_VERSION,
|
|
};
|
|
|
|
/*
|
|
* prototypes for functions in be-secure-common.c
|
|
*/
|
|
extern int run_ssl_passphrase_command(const char *prompt, bool is_server_start,
|
|
char *buf, int size);
|
|
extern bool check_ssl_key_file_permissions(const char *ssl_key_file,
|
|
bool isServerStart);
|
|
|
|
#endif /* LIBPQ_H */
|