Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-18 Thread Tom Lane
Tatsuo Ishii [EMAIL PROTECTED] writes: One of our engineer claimed that double free bug itself is a vulnerability, thus 8.2.1 release should be called as security release. [ shrug... ] AFAICS the crashing bugs we fixed in 8.2.1 can't be exploited for anything beyond crashing the backend, and

Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-18 Thread Tatsuo Ishii
Ok, understood. -- Tatsuo Ishii SRA OSS, Inc. Japan Tatsuo Ishii [EMAIL PROTECTED] writes: One of our engineer claimed that double free bug itself is a vulnerability, thus 8.2.1 release should be called as security release. [ shrug... ] AFAICS the crashing bugs we fixed in 8.2.1 can't

Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-17 Thread Tatsuo Ishii
Tom, Is this a fix for security hole/vulnerability? One of our engineer claimed that double free bug itself is a vulnerability, thus 8.2.1 release should be called as security release. -- Tatsuo Ishii SRA OSS, Inc. Japan Log Message: --- Fix failure due to accessing an already-freed