pgsql: Back-patch "Only quote libpq connection string values that need - Mailing list pgsql-committers

From Noah Misch
Subject pgsql: Back-patch "Only quote libpq connection string values that need
Date
Msg-id E1bWlGS-0006qL-QX@gemulon.postgresql.org
Whole thread Raw
List pgsql-committers
Back-patch "Only quote libpq connection string values that need quoting."

Back-patch commit 2953cd6d17210935098c803c52c6df5b12a725b9 and certain
runPgDump() bits of 3dee636e0404885d07885d41c0d70e50c784f324 to 9.2 and
9.1.  This synchronizes their doConnStrQuoting() implementations with
later releases.  Subsequent security patches will modify that function.

Security: CVE-2016-5424

Branch
------
REL9_1_STABLE

Details
-------
http://git.postgresql.org/pg/commitdiff/c761c9fee082623777466e6a5841056960fc006c

Modified Files
--------------
src/bin/pg_dump/pg_dumpall.c | 48 +++++++++++++++++++++++++++++++++-----------
1 file changed, 36 insertions(+), 12 deletions(-)


pgsql-committers by date:

Previous
From: Noah Misch
Date:
Subject: pgsql: Introduce a psql "\connect -reuse-previous=on|off" option.
Next
From: Tom Lane
Date:
Subject: pgsql: Fix two errors with nested CASE/WHEN constructs.