← Back to branch summary

~ubuntu-branches/ubuntu/oneiric/postgresql-9.1/oneiric-security

« back to all changes in this revision

Viewing changes to src/backend/tcop/utility.c

  • Committer: Package Import Robot
  • Author(s): Martin Pitt
  • Date: 2013-02-05 18:13:52 UTC
  • mfrom: (1.1.10) (10.1.5 oneiric-proposed)
  • Revision ID: package-import@ubuntu.com-20130205181352-3kw4f94ilqklzm7c
Tags: 9.1.8-0ubuntu11.10
https://launchpad.net/bugs/1116336
* New upstream security/bug fix release: (LP: #1116336)
  - Prevent execution of enum_recv from SQL
    The function was misdeclared, allowing a simple SQL command to crash the
    server.  In principle an attacker might be able to use it to examine the
    contents of server memory.  Our thanks to Sumit Soni (via Secunia SVCRP)
    for reporting this issue. (CVE-2013-0255)
  - See HISTORY/changelog.gz for the other bug fixes.

Show diffs side-by-side

added added

removed removed

Lines of Context:
src/backend/tcop/utility.c
1071
1071
                        break;
1072
1072
 
1073
1073
                case T_VacuumStmt:
1074
 
                        /* we choose to allow this during "read only" transactions */
1075
 
                        PreventCommandDuringRecovery("VACUUM");
1076
 
                        vacuum((VacuumStmt *) parsetree, InvalidOid, true, NULL, false,
1077
 
                                   isTopLevel);
 
1074
                        {
 
1075
                                VacuumStmt *stmt = (VacuumStmt *) parsetree;
 
1076
 
 
1077
                                /* we choose to allow this during "read only" transactions */
 
1078
                                PreventCommandDuringRecovery((stmt->options & VACOPT_VACUUM) ?
 
1079
                                                                                         "VACUUM" : "ANALYZE");
 
1080
                                vacuum(stmt, InvalidOid, true, NULL, false, isTopLevel);
 
1081
                        }
1078
1082
                        break;
1079
1083
 
1080
1084
                case T_ExplainStmt: