diff options
| author | Noah Misch <noah@leadboat.com> | 2015-05-18 10:02:31 -0400 |
|---|---|---|
| committer | Noah Misch <noah@leadboat.com> | 2015-05-18 10:02:35 -0400 |
| commit | 7a0d48ac7f5ad660414f1b0b6a36cb2b2b7a3667 (patch) | |
| tree | 471077f5da5f76847b3604513193ae4d3519d69e /src/backend/utils/adt/jsonb_util.c | |
| parent | 05da36196f559b9fcf016fa6a70dfd33d6936a78 (diff) | |
| download | postgresql-7a0d48ac7f5ad660414f1b0b6a36cb2b2b7a3667.tar.gz postgresql-7a0d48ac7f5ad660414f1b0b6a36cb2b2b7a3667.zip | |
Prevent a double free by not reentering be_tls_close().
Reentering this function with the right timing caused a double free,
typically crashing the backend. By synchronizing a disconnection with
the authentication timeout, an unauthenticated attacker could achieve
this somewhat consistently. Call be_tls_close() solely from within
proc_exit_prepare(). Back-patch to 9.0 (all supported versions).
Benkocs Norbert Attila
Security: CVE-2015-3165
Diffstat (limited to 'src/backend/utils/adt/jsonb_util.c')
0 files changed, 0 insertions, 0 deletions