diff options
author | Noah Misch <noah@leadboat.com> | 2016-08-08 10:07:46 -0400 |
---|---|---|
committer | Noah Misch <noah@leadboat.com> | 2016-08-08 10:07:50 -0400 |
commit | 2e5e90d8d10ca568381adfaaf53e8a9e8e342375 (patch) | |
tree | 7f2c9b7b64991d968d3a9406e0944cd528e2fa20 /src/backend/executor/execQual.c | |
parent | ec3aebdbdf0137c8ff27ae089d1431cf61bc15b5 (diff) |
Fix Windows shell argument quoting.
The incorrect quoting may have permitted arbitrary command execution.
At a minimum, it gave broader control over the command line to actors
supposed to have control over a single argument. Back-patch to 9.1 (all
supported versions).
Security: CVE-2016-5424
Diffstat (limited to 'src/backend/executor/execQual.c')
0 files changed, 0 insertions, 0 deletions