Serguei A. Mokhov wrote:
>
>
> On Mon, 2 Sep 2002, Tom Lane wrote:
>
> > Date: Mon, 02 Sep 2002 10:33:49 -0400
> > From: Tom Lane <tgl@sss.pgh.pa.us>
> > To: Christopher Kings-Lynne <chriskl@familyhealth.com.au>
> > Cc: Bruce Momjian <pgman@candle.pha.pa.us>,
> > PostgreSQL-development <pgsql-hackers@postgresql.org>
> > Subject: Re: [HACKERS] I am done
> >
> > "Christopher Kings-Lynne" <chriskl@familyhealth.com.au> writes:
> > > You can probably nail some TODOs:
> >
>
> Maybe add a TODO item:
>
> * fix a possibility of DoS attacks in the backend before the user is
> authenticated
>
> ? Since I guess my patch for that is too late and I don't even know if
> it's any good approach at all.
It is a security issue and will have to be fixed before 7.3 final, one
way or the other.
-- Bruce Momjian | http://candle.pha.pa.us pgman@candle.pha.pa.us | (610)
359-1001+ If your life is a hard drive, | 13 Roberts Road + Christ can be your backup. | Newtown Square,
Pennsylvania19073