This is an automated email from the ASF dual-hosted git repository.
tuhaihe pushed a change to branch main
in repository https://gitbox.apache.org/repos/asf/cloudberry.git
from e01957b5cf0 Enable required_linear_history
new ab9ea2cd61a ltree: Fix overflows with lquery parsing
new 1a5426fbcc2 Fix overflows with ts_headline()
new bd08de0720f Harden our regex engine against integer overflow in size
calculations.
new 284882a3e5c Prevent buffer overrun in unicode_normalize().
new 5b71e8d6474 Fix assorted places that need to use palloc_array().
new 99028aa8c89 Add raw_connect and raw_connect_works to Cluster.pm
new bd12951a028 Fix unbounded recursive handling of SSL/GSS in
ProcessStartupPacket()
new 7ec848bfd76 Unify src/common/'s definitions of MaxAllocSize.
new ff4851115c7 Guard against overflow in "left" fields of query_int and
ltxtquery.
new 5f89504d449 Add timingsafe_bcmp(), for constant-time memory comparison
new cccceecba69 Apply timingsafe_bcmp() in authentication paths
new 956914e2c7d Fix SQL injection in logical replication origin checks.
new 7a0624e27f0 Avoid passing unintended format codes to snprintf().
new d804b69fb54 Guard against unsafe conditions in usage of pg_strftime().
new 55386c546f0 Check CREATE privilege on multirange type schema in CREATE
TYPE.
new d6834f85ae6 Avoid overflow in size calculations in formatting.c.
new 93e2779de4f Prevent path traversal in pg_basebackup and pg_rewind
new dd6cb001c75 Fix integer-overflow and alignment hazards in
locale-related code.
new ef75653ef0c Fix integer overflow in array_agg(), when the array grows
too large
new d8772e1c540 Mark PQfn() unsafe and fix overrun in frontend LO
interface.
new ee3cfe5b8e5 refint: Fix SQL injection and buffer overruns.
new 388bc93116a Remove test cases for field overflows in intarray and
ltree.
new 5f4b184f7a3 Use palloc_array() in a few more places to avoid overflow
new d8008a4f4de Make palloc_array() and friends safe against integer
overflow.
new 29f6d06ab67 Add pg_add_size_overflow() and friends
new c7b54068e38 Adapt cloubderry mock generator for pg_noinline function
attribute
new 6e4bcc5de68 Adapt ORCA for a935348f7 regression test changes
The 27 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
configure | 23 +++
configure.ac | 3 +-
contrib/hstore_plperl/hstore_plperl.c | 2 +-
contrib/hstore_plpython/hstore_plpython.c | 2 +-
contrib/intarray/_int_bool.c | 82 +++++++--
contrib/ltree/ltree_io.c | 19 ++-
contrib/ltree/ltxtquery_io.c | 75 ++++++--
contrib/spi/refint.c | 84 +++++----
doc/src/sgml/libpq.sgml | 11 +-
meson.build | 2 +
src/backend/commands/subscriptioncmds.c | 9 +-
src/backend/commands/typecmds.c | 7 +
src/backend/libpq/auth-scram.c | 8 +-
src/backend/libpq/auth.c | 2 +-
src/backend/libpq/crypt.c | 6 +-
src/backend/postmaster/postmaster.c | 23 ++-
src/backend/regex/regc_color.c | 17 +-
src/backend/regex/regc_cvec.c | 3 +
src/backend/regex/regc_nfa.c | 10 ++
src/backend/regex/regcomp.c | 5 +-
src/backend/regex/rege_dfa.c | 23 ++-
src/backend/regex/regexec.c | 8 +-
src/backend/storage/ipc/shmem.c | 36 ----
src/backend/tsearch/wparser_def.c | 24 ++-
src/backend/utils/adt/arrayfuncs.c | 13 +-
src/backend/utils/adt/formatting.c | 8 +-
src/backend/utils/adt/multirangetypes.c | 9 +-
src/backend/utils/adt/pg_locale.c | 87 +++++-----
src/backend/utils/adt/timestamp.c | 14 +-
src/backend/utils/adt/varlena.c | 14 +-
src/backend/utils/mmgr/mcxt.c | 129 ++++++++++++++
src/bin/pg_basebackup/bbstreamer_file.c | 12 ++
src/bin/pg_basebackup/bbstreamer_tar.c | 3 +
src/bin/pg_rewind/file_ops.c | 23 +++
src/common/fe_memutils.c | 188 +++++++++++++++++++++
src/common/psprintf.c | 3 -
src/common/saslprep.c | 4 -
src/common/stringinfo.c | 3 -
src/common/unicode_norm.c | 19 +++
src/include/common/fe_memutils.h | 40 ++++-
src/include/common/int.h | 67 ++++++++
src/include/pg_config.h.in | 7 +
src/include/port.h | 5 +
src/include/regex/regcustom.h | 2 +
src/include/regex/regguts.h | 13 ++
src/include/storage/shmem.h | 2 -
src/include/utils/memutils.h | 2 +-
src/include/utils/palloc.h | 22 ++-
src/interfaces/libpq/fe-auth-scram.c | 6 +-
src/interfaces/libpq/fe-exec.c | 16 +-
src/interfaces/libpq/fe-lobj.c | 12 +-
src/interfaces/libpq/fe-protocol3.c | 13 +-
src/interfaces/libpq/libpq-int.h | 6 +-
src/port/meson.build | 1 +
src/port/path.c | 17 ++
src/port/timingsafe_bcmp.c | 43 +++++
src/test/Makefile | 2 +-
src/test/meson.build | 1 +
src/test/perl/PostgreSQL/Test/Cluster.pm | 76 +++++++++
src/test/{authentication => postmaster}/.gitignore | 0
src/test/{ldap => postmaster}/Makefile | 10 +-
src/test/{authentication => postmaster}/README | 11 +-
src/test/postmaster/meson.build | 12 ++
src/test/postmaster/t/004_negotiate.pl | 81 +++++++++
src/test/regress/expected/multirangetypes.out | 16 ++
src/test/regress/expected/tsearch.out | 10 ++
src/test/regress/expected/tsearch_optimizer.out | 10 ++
src/test/regress/sql/multirangetypes.sql | 16 ++
src/test/regress/sql/tsearch.sql | 8 +
src/test/subscription/t/030_origin.pl | 35 ++--
src/test/unit/mock/mocker.py | 2 +-
src/timezone/strftime.c | 11 ++
src/tools/msvc/Mkvcbuild.pm | 2 +-
src/tools/msvc/Solution.pm | 2 +
74 files changed, 1299 insertions(+), 293 deletions(-)
create mode 100644 src/port/timingsafe_bcmp.c
copy src/test/{authentication => postmaster}/.gitignore (100%)
copy src/test/{ldap => postmaster}/Makefile (72%)
copy src/test/{authentication => postmaster}/README (62%)
create mode 100644 src/test/postmaster/meson.build
create mode 100644 src/test/postmaster/t/004_negotiate.pl
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
