diff options
| author | Peter Eisentraut <peter@eisentraut.org> | 2024-08-16 06:41:17 +0200 |
|---|---|---|
| committer | Peter Eisentraut <peter@eisentraut.org> | 2024-08-16 06:41:17 +0200 |
| commit | e882bcae032d5e89777e2a1f3d78dfb77c17c192 (patch) | |
| tree | 48e4329a530e998bf9e4d44195bad3a9f03c0d43 /src/backend/utils/adt/jsonfuncs.c | |
| parent | e3ec9dc1bf4983fcedb6f43c71ea12ee26aefc7a (diff) | |
| download | postgresql-e882bcae032d5e89777e2a1f3d78dfb77c17c192.tar.gz postgresql-e882bcae032d5e89777e2a1f3d78dfb77c17c192.zip | |
libpq: Fix minor TOCTOU violation
libpq checks the permissions of the password file before opening it.
The way this is done in two separate operations, a static analyzer
would flag as a time-of-check-time-of-use violation. In practice, you
can't do anything with that, but it still seems better style to fix
it.
To fix it, open the file first and then check the permissions on the
opened file handle.
Reviewed-by: Aleksander Alekseev <aleksander@timescale.com>
Reviewed-by: Andreas Karlsson <andreas@proxel.se>
Discussion: https://www.postgresql.org/message-id/flat/a3356054-14ae-4e7a-acc6-249d19dac20b%40eisentraut.org
Diffstat (limited to 'src/backend/utils/adt/jsonfuncs.c')
0 files changed, 0 insertions, 0 deletions