Noah Misch b0ce385032 Prevent a double free by not reentering be_tls_close(). ...

Reentering this function with the right timing caused a double free,
typically crashing the backend.  By synchronizing a disconnection with
the authentication timeout, an unauthenticated attacker could achieve
this somewhat consistently.  Call be_tls_close() solely from within
proc_exit_prepare().  Back-patch to 9.0 (all supported versions).

Benkocs Norbert Attila

Security: CVE-2015-3165

2015-05-18 10:02:31 -04:00

..

backend

Prevent a double free by not reentering be_tls_close().

2015-05-18 10:02:31 -04:00

bin

Add new files to nls.mk

2015-05-17 22:55:17 -04:00

common

Reorganize our CRC source files again.

2015-04-14 17:03:42 +03:00

include

Fix failure to copy IndexScan.indexorderbyops in copyfuncs.c.

2015-05-17 21:22:12 -04:00

interfaces

Add new files to nls.mk

2015-05-17 22:55:17 -04:00

makefiles

Fix parallel make risk with new check temp-install setup

2015-04-29 20:34:22 -04:00

pl

Support "expanded" objects, particularly arrays, for better performance.

2015-05-14 12:08:49 -04:00

port

TABLESAMPLE, SQL Standard and extensible

2015-05-15 14:37:10 -04:00

template

Remove duplicate specification of -Ae for HP-UX C compiler.

2015-01-13 22:52:11 -05:00

test

Fix typos in comments

2015-05-17 14:58:04 +02:00

timezone

Update time zone data files to tzdata release 2015d.

2015-05-15 19:35:29 -04:00

tools

Enable transforms tests for python 2 on MSVC builds

2015-04-29 13:49:24 -04:00

tutorial

Update copyright for 2015

2015-01-06 11:43:47 -05:00

.gitignore

Convert cvsignore to gitignore, and add .gitignore for build targets.

2010-09-22 12:57:04 +02:00

bcc32.mak

Autoconfiscate selection of 64-bit int type for 64-bit large object API.

2012-10-07 21:52:43 -04:00

DEVELOPERS

Replace a couple of references to files that no longer exist in the source

2009-05-04 08:08:47 +00:00

Makefile

Create libpgcommon, and move pg_malloc et al to it

2013-02-12 11:21:05 -03:00

Makefile.global.in

doc build: use unique Makefile variable to control temp install

2015-05-12 12:30:50 -04:00

Makefile.shlib

Add transforms feature

2015-04-26 10:33:14 -04:00

nls-global.mk

Setup error context callback for transaction lock waits

2014-03-19 15:10:36 -03:00

win32.mak

Autoconfiscate selection of 64-bit int type for 64-bit large object API.

2012-10-07 21:52:43 -04:00