Tom Lane dc7378793a Parallel workers use AuthenticatedUserId for connection privilege checks. ... Commit 5a2fed911 had an unexpected side-effect: the parallel worker launched for the new test case would fail if it couldn't use a superuser-reserved connection slot. The reason that test failed while all our pre-existing ones worked is that the connection privilege tests in InitPostgres had been based on the superuserness of the leader's AuthenticatedUserId, but after the rearrangements of 5a2fed911 we were testing the superuserness of CurrentUserId, which the new test case deliberately made to be a non-superuser. This all seems very accidental and probably not the behavior we really want, but a security patch is no time to be redesigning things. Pending some discussion about desirable semantics, hack it so that InitPostgres continues to pay attention to the superuserness of AuthenticatedUserId when starting a parallel worker. Nathan Bossart and Tom Lane, per buildfarm member sawshark. Security: CVE-2024-10978		2024-11-11 17:05:53 -05:00
..
backend	Parallel workers use AuthenticatedUserId for connection privilege checks.	2024-11-11 17:05:53 -05:00
bin	Translation updates	2024-11-11 13:58:30 +01:00
common	Fix overread in JSON parsing errors for incomplete byte sequences	2024-05-09 12:45:51 +09:00
fe_utils	Clean up assorted failures under clang's -fsanitize=undefined checks.	2022-03-03 18:13:24 -05:00
include	Fix improper interactions between session_authorization and role.	2024-11-11 10:29:54 -05:00
interfaces	Translation updates	2024-11-11 13:58:30 +01:00
makefiles	Remove libpq.rc, use win32ver.rc for libpq	2020-01-15 15:06:12 +01:00
pl	Fix cross-version upgrade tests.	2024-11-11 13:57:41 -05:00
port	Fix lstat() for broken junction points on Windows.	2024-11-08 09:46:39 +10:30
template	On NetBSD, force dynamic symbol resolution at postmaster start.	2022-08-30 17:29:08 -04:00
test	Fix improper interactions between session_authorization and role.	2024-11-11 10:29:54 -05:00
timezone	Update time zone data files to tzdata release 2024b.	2024-10-29 11:50:10 -04:00
tools	src/tools/msvc: Respect REGRESS_OPTS in plcheck.	2024-11-11 10:56:12 -08:00
tutorial	Doc: sync src/tutorial/basics.source with SGML documentation.	2022-11-19 13:09:14 -05:00
.gitignore
DEVELOPERS
Makefile	Fix partial-build problems introduced by having more generated headers.	2018-04-09 16:42:10 -04:00
Makefile.global.in	Suppress macOS warnings about duplicate libraries in link commands.	2023-09-29 14:07:30 -04:00
Makefile.shlib	Stop using "-multiply_defined suppress" on macOS.	2023-09-26 21:06:21 -04:00
nls-global.mk	NLS: Fix backend gettext triggers	2019-09-23 09:04:20 +02:00