git.postgresql.org Git - postgresql.git/commit

git projects / postgresql.git / commit

Fix Windows shell argument quoting.

author Noah Misch <noah@leadboat.com>

Mon, 8 Aug 2016 14:07:46 +0000 (10:07 -0400)

committer Noah Misch <noah@leadboat.com>

Mon, 8 Aug 2016 14:07:46 +0000 (10:07 -0400)

commit bd65371851b7a9964b4b265d06fe1304315e37c1

tree 42a29232611d7751de5457a683a08b4fc5e86982 tree

parent 142c24c23447f212e642a0ffac9af878b93f490d commit | diff

Fix Windows shell argument quoting.

The incorrect quoting may have permitted arbitrary command execution.
At a minimum, it gave broader control over the command line to actors
supposed to have control over a single argument. Back-patch to 9.1 (all
supported versions).

Security: CVE-2016-5424

src/bin/pg_dump/pg_dumpall.c diff | blob | blame | history

This is the main PostgreSQL git repository.

RSS Atom