This is an automated email from the ASF dual-hosted git repository.
reshke pushed a change to branch REL_2_STABLE
in repository https://gitbox.apache.org/repos/asf/cloudberry.git
from 0fd99be1177 Fix for CDBD expand with concurrent distributed tx (#1801)
new 857f1ff0298 Harden our regex engine against integer overflow in size
calculations.
new 1d091155d24 Prevent buffer overrun in unicode_normalize().
new a4f5fd9cbcd Fix assorted places that need to use palloc_array().
new 9b66832b64f Add raw_connect and raw_connect_works to Cluster.pm
new e62692238e2 Fix unbounded recursive handling of SSL/GSS in
ProcessStartupPacket()
new 99eb93fd15c Unify src/common/'s definitions of MaxAllocSize.
new ee5dee0035a Guard against overflow in "left" fields of query_int and
ltxtquery.
new e764fc2972c Apply timingsafe_bcmp() in authentication paths
new 94be56b173c Avoid passing unintended format codes to snprintf().
new a2663d955da Guard against unsafe conditions in usage of pg_strftime().
new 04d7a485691 Check CREATE privilege on multirange type schema in CREATE
TYPE.
new eeb4bf30b9a Avoid overflow in size calculations in formatting.c.
new c2a1b74db3f Prevent path traversal in pg_basebackup and pg_rewind
new dfe23bf1a02 Fix integer-overflow and alignment hazards in
locale-related code.
new a289db892e8 Fix integer overflow in array_agg(), when the array grows
too large
new cbfe1048ed6 Mark PQfn() unsafe and fix overrun in frontend LO
interface.
new a7b9fe5bd13 refint: Fix SQL injection and buffer overruns.
new 5e8a0b1b948 Partally apply 37842f3dc6c
new 2db06142506 Add timingsafe_bcmp(), for constant-time memory comparison
new f1bd6b758e9 Make palloc_array() and friends safe against integer
overflow.
new d5e22ca420f Adapt cloubderry mock generator for pg_noinline function
attribute
new bc43fd1f4dc Fix rebase issue in ac34fdb2af95
The 22 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails. The revisions
listed as "add" were already present in the repository and have only
been added to this reference.
Summary of changes:
configure | 23 +++
configure.ac | 3 +-
contrib/intarray/_int_bool.c | 60 +++++--
contrib/intarray/expected/_int.out | 3 +
contrib/intarray/sql/_int.sql | 2 +
contrib/ltree/expected/ltree.out | 3 +
contrib/ltree/ltxtquery_io.c | 51 ++++--
contrib/ltree/sql/ltree.sql | 3 +
contrib/spi/refint.c | 84 ++++-----
doc/src/sgml/libpq.sgml | 11 +-
src/backend/commands/typecmds.c | 7 +
src/backend/libpq/auth-scram.c | 8 +-
src/backend/libpq/auth.c | 2 +-
src/backend/libpq/crypt.c | 6 +-
src/backend/postmaster/postmaster.c | 23 ++-
src/backend/regex/regc_color.c | 17 +-
src/backend/regex/regc_cvec.c | 3 +
src/backend/regex/regc_nfa.c | 10 ++
src/backend/regex/regcomp.c | 5 +-
src/backend/regex/rege_dfa.c | 23 ++-
src/backend/regex/regexec.c | 9 +-
src/backend/storage/ipc/shmem.c | 36 ----
src/backend/utils/adt/arrayfuncs.c | 13 +-
src/backend/utils/adt/formatting.c | 8 +-
src/backend/utils/adt/multirangetypes.c | 9 +-
src/backend/utils/adt/pg_locale.c | 2 +-
src/backend/utils/adt/timestamp.c | 14 +-
src/backend/utils/adt/varlena.c | 14 +-
src/backend/utils/mmgr/mcxt.c | 196 ++++++++++++++++++---
src/bin/pg_rewind/file_ops.c | 23 +++
src/common/fe_memutils.c | 188 ++++++++++++++++++++
src/common/psprintf.c | 3 -
src/common/stringinfo.c | 3 -
src/common/unicode_norm.c | 19 ++
src/include/common/fe_memutils.h | 41 ++++-
src/include/common/int.h | 73 +++++++-
src/include/pg_config.h.in | 7 +
src/include/port.h | 5 +
src/include/regex/regcustom.h | 26 ++-
src/include/regex/regguts.h | 13 ++
src/include/storage/shmem.h | 2 -
src/include/utils/memutils.h | 1 +
src/include/utils/palloc.h | 22 ++-
src/interfaces/libpq/fe-auth-scram.c | 5 +-
src/interfaces/libpq/fe-exec.c | 16 +-
src/interfaces/libpq/fe-lobj.c | 12 +-
src/interfaces/libpq/fe-protocol3.c | 14 +-
src/interfaces/libpq/libpq-int.h | 6 +-
src/port/path.c | 17 ++
src/port/timingsafe_bcmp.c | 43 +++++
src/test/Makefile | 2 +-
src/test/perl/PostgresNode.pm | 76 ++++++++
src/test/{authentication => postmaster}/.gitignore | 0
src/test/{mdb_admin => postmaster}/Makefile | 8 +-
src/test/{authentication => postmaster}/README | 13 +-
src/test/postmaster/t/004_negotiate.pl | 81 +++++++++
src/test/regress/expected/multirangetypes.out | 16 ++
src/test/regress/sql/multirangetypes.sql | 16 ++
src/test/unit/mock/mocker.py | 2 +-
src/timezone/strftime.c | 11 ++
src/tools/msvc/Mkvcbuild.pm | 2 +-
src/tools/msvc/Solution.pm | 2 +
62 files changed, 1184 insertions(+), 232 deletions(-)
create mode 100644 src/port/timingsafe_bcmp.c
copy src/test/{authentication => postmaster}/.gitignore (100%)
copy src/test/{mdb_admin => postmaster}/Makefile (72%)
copy src/test/{authentication => postmaster}/README (59%)
create mode 100644 src/test/postmaster/t/004_negotiate.pl
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
