Re: I am done - Mailing list pgsql-hackers

From Bruce Momjian
Subject Re: I am done
Date
Msg-id 200209021524.g82FO4C12842@candle.pha.pa.us
Whole thread Raw
In response to Re: I am done  ("Serguei A. Mokhov" <sa_mokho@alcor.concordia.ca>)
List pgsql-hackers
Serguei A. Mokhov wrote:
> 
> 
> On Mon, 2 Sep 2002, Tom Lane wrote:
> 
> > Date: Mon, 02 Sep 2002 10:33:49 -0400
> > From: Tom Lane <tgl@sss.pgh.pa.us>
> > To: Christopher Kings-Lynne <chriskl@familyhealth.com.au>
> > Cc: Bruce Momjian <pgman@candle.pha.pa.us>,
> >      PostgreSQL-development <pgsql-hackers@postgresql.org>
> > Subject: Re: [HACKERS] I am done
> >
> > "Christopher Kings-Lynne" <chriskl@familyhealth.com.au> writes:
> > > You can probably nail some TODOs:
> >
> 
> Maybe add a TODO item:
> 
> * fix a possibility of DoS attacks in the backend before the user is
>   authenticated
> 
> ? Since I guess my patch for that is too late and I don't even know if
> it's any good approach at all.

It is a security issue and will have to be fixed before 7.3 final, one
way or the other.

--  Bruce Momjian                        |  http://candle.pha.pa.us pgman@candle.pha.pa.us               |  (610)
359-1001+  If your life is a hard drive,     |  13 Roberts Road +  Christ can be your backup.        |  Newtown Square,
Pennsylvania19073
 


pgsql-hackers by date:

Previous
From: Bruce Momjian
Date:
Subject: Re: serial datatype changes for v7.3?
Next
From: Oleg Bartunov
Date:
Subject: Re: tsearch stop words