1. 13 2月, 2006 19 次提交
    • B
      Revert because C locale uses "" for thousands_sep, meaning "n/a", while · 8325be22
      Bruce Momjian 提交于
      French uses "" for "don't want".  Seems we have to keep the existing
      behavior.
      8325be22
    • T
      Update release notes. · 47a048f3
      Tom Lane 提交于
      47a048f3
    • T
      Fix bug that allowed any logged-in user to SET ROLE to any other database user · 226a980b
      Tom Lane 提交于
      id (CVE-2006-0553).  Also fix related bug in SET SESSION AUTHORIZATION that
      allows unprivileged users to crash the server, if it has been compiled with
      Asserts enabled.  The escalation-of-privilege risk exists only in 8.1.0-8.1.2.
      However, the Assert-crash risk exists in all releases back to 7.3.
      Thanks to Akio Ishida for reporting this problem.
      226a980b
    • B
      Throw a warning rather than an error on invalid character from UTF8 to · 2a5180c2
      Bruce Momjian 提交于
      Latin1, like we do for other Latin encodings.
      2a5180c2
    • T
      Fix broken markup. · 1ac1526e
      Tom Lane 提交于
      1ac1526e
    • B
      · 6e51bcef
      Bruce Momjian 提交于
      Back out patch pending review.
      
      ---------------------------------------------------------------------------
      
      >   I've now tested this patch at home w/ 8.2HEAD and it seems to fix the
      >   bug.  I plan on testing it under 8.1.2 at work tommorow with
      >   mod_auth_krb5, etc, and expect it'll work there.  Assuming all goes
      >   well and unless someone objects I'll forward the patch to -patches.
      >   It'd be great to have this fixed as it'll allow us to use Kerberos to
      >   authenticate to phppgadmin and other web-based tools which use
      >   Postgres.
      
        While playing with this patch under 8.1.2 at home I discovered a
        mistake in how I manually applied one of the hunks to fe-auth.c.
        Basically, the base code had changed and so the patch needed to be
        modified slightly.  This is because the code no longer either has a
        freeable pointer under 'name' or has 'name' as NULL.
      
        The attached patch correctly frees the string from pg_krb5_authname
        (where it had been strdup'd) if and only if pg_krb5_authname returned
        a string (as opposed to falling through and having name be set using
        name = pw->name;).  Also added a comment to this effect.
        Please review.
      
      Stephen Frost (sfrost@snowman.net) wrote:
      6e51bcef
    • B
      > I've now tested this patch at home w/ 8.2HEAD and it seems to fix the · 3e682635
      Bruce Momjian 提交于
      >   bug.  I plan on testing it under 8.1.2 at work tommorow with
      >   mod_auth_krb5, etc, and expect it'll work there.  Assuming all goes
      >   well and unless someone objects I'll forward the patch to -patches.
      >   It'd be great to have this fixed as it'll allow us to use Kerberos to
      >   authenticate to phppgadmin and other web-based tools which use
      >   Postgres.
      
        While playing with this patch under 8.1.2 at home I discovered a
        mistake in how I manually applied one of the hunks to fe-auth.c.
        Basically, the base code had changed and so the patch needed to be
        modified slightly.  This is because the code no longer either has a
        freeable pointer under 'name' or has 'name' as NULL.
      
        The attached patch correctly frees the string from pg_krb5_authname
        (where it had been strdup'd) if and only if pg_krb5_authname returned
        a string (as opposed to falling through and having name be set using
        name = pw->name;).  Also added a comment to this effect.
        Please review.
      
      Stephen Frost (sfrost@snowman.net) wrote:
      3e682635
    • B
      Support "" for thousands separator and plus sign in to_char(), per · 2cb61220
      Bruce Momjian 提交于
      report from French Debian user.  psql already handles "" fine.
      2cb61220
    • B
      Remove LEFT part of JOIN to pg_roles because of optimizer limitation: · 05e27a9c
      Bruce Momjian 提交于
      > True, but they're not being used where you'd expect. This seems to be
      > something to do with the fact that it's not pg_authid which is being
      > accessed, but rather the view pg_roles.
      
      I looked into this and it seems the problem is that the view doesn't
      get flattened into the main query because of the has_nullable_targetlist
      limitation in prepjointree.c.  That's triggered because pg_roles has
              '********'::text AS rolpassword
      which isn't nullable, meaning it would produce wrong behavior if
      referenced above the outer join.
      
      Ultimately, the reason this is a problem is that the planner deals only
      in simple Vars while processing joins; it doesn't want to think about
      expressions.  I'm starting to think that it may be time to fix this,
      because I've run into several related restrictions lately, but it seems
      like a nontrivial project.
      
      In the meantime, reducing the LEFT JOIN to pg_roles to a JOIN as per
      Peter's suggestion seems like the best short-term workaround.
      05e27a9c
    • B
      Update README file. · 7d57a182
      Bruce Momjian 提交于
      Joshua D. Drake
      7d57a182
    • B
      Not done: · 3694e706
      Bruce Momjian 提交于
      > 	o %Allow ALTER TABLE ... ALTER CONSTRAINT ... RENAME
      3694e706
    • B
      Revert patch becaues of locking concerns: · 04a2b54c
      Bruce Momjian 提交于
      Allow ALTER TABLE ... ALTER CONSTRAINT ... RENAME
      
      Joachim Wieland
      04a2b54c
    • B
      > Actually, if you submit a patch that says either "SCROLL is the · 92a26489
      Bruce Momjian 提交于
      default"
      > or "NO SCROLL is the default", it will be rejected as incorrect.  The
      > reason is that the default behavior is different from either of these,
      > as is explained in the NOTES section.
      
      Ok, so *that's* where the bit about the query plan being simple enough.
      Based on that, ISTM that it should be premissable for us to decide that
      a cursor requiring a sort isn't "simple enough" to support SCROLL.
      
      In any case, here's a patch that makes the non-standard behavior easier
      for people to find.
      
      Jim C. Nasby
      92a26489
    • B
      Fix release item ordering. · 0bbd4704
      Bruce Momjian 提交于
      0bbd4704
    • B
      Update back branch release notes. · 6df2da06
      Bruce Momjian 提交于
      6df2da06
    • B
      Fix release markup. · a321d675
      Bruce Momjian 提交于
      a321d675
    • B
      Update release checlist. · 10d78c76
      Bruce Momjian 提交于
      10d78c76
    • B
      Update for 8.1.3. · cffed790
      Bruce Momjian 提交于
      cffed790
    • B
      Update release notes for 8.1.3. · 720bad3b
      Bruce Momjian 提交于
      720bad3b
  2. 12 2月, 2006 21 次提交