summaryrefslogtreecommitdiff
path: root/src/interfaces
AgeCommit message (Collapse)Author
2003-12-02Brand 7.3.5.REL7_3_5Tom Lane
2003-11-30Make PQescapeBytea and byteaout consistent with each other, andJoe Conway
octal escape all octets outside the range 0x20 to 0x7e. This fixes the problem pointed out by Sergey Yatskevich here: http://archives.postgresql.org/pgsql-bugs/2003-11/msg00140.php
2003-10-31Back-patch removal of unnecessary inclusion of <crypt.h>, so thatTom Lane
7.3.5 will build out-of-the-box on Solaris.
2003-08-22Sigh, I'm an idiot ... SSL_ERROR_WANT_READ isn't an error conditionTom Lane
at all, it just means 'no data available yet'.
2003-08-07Backport to 7.3. Third try to fix the sql injectionBarry Lind
vulnerability. This fix completely removes the ability (hack) of being able to bind a list of values in an in clause. It was demonstrated that by allowing that functionality you open up the possibility for certain types of sql injection attacks. The previous fix attempts all focused on preventing the insertion of additional sql statements (the semi-colon problem: xxx; any new sql statement here). But that still left the ability to change the where clause on the current statement or perform a subselect which can circumvent applicaiton security logic and/or allow you to call any stored function. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-08-04Fix some more problems with testing error returns from SSL.Tom Lane
2003-07-23Patch to fix additional SQL injection vulnerabilities reported by Oliver JowettBarry Lind
and Dmitry Tkach Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-07-23Stamp 7.3.4 release.Bruce Momjian
2003-07-22Fix to prevent SQL injection attacks when calling setObject(int,Object,int)Barry Lind
where the Object is a String and the type is numeric (i.e. INTEGER,LONG,etc). The fix applies the standard escaping for these values. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-05-22Brand 7.3.3.Tom Lane
2003-05-19Upped JDBC build number to 110 for the 7.3.3 releaseBarry Lind
Modified Files: Tag: REL7_3_STABLE Driver.java.in
2003-05-18Small translation updates for 7.3.3 release.Peter Eisentraut
2003-04-17Applied patches from Kris Jurka fixing a string tokenizing problem andBarry Lind
fixing an order by problem for index metadata results. Also includes removing some unused code as well as a fix to the toString method on statement. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-04-10Fix error recovery for SSL_read/SSL_write calls.Tom Lane
2003-04-08added addDataType to the interfaceDave Cramer
2003-03-25fixed problem where information from previous updates was leaking into ↵Dave Cramer
subsequent updates patch from Shawn Green, slightly modified
2003-03-25added DISTINCT to the query to get cross reference. This is required when ↵Dave Cramer
two columns in a table are both foreign keys to another table. From Peter Royal proyal@pace2020.com
2003-03-25fixed problem where information from previous updates was leaking into ↵Dave Cramer
subsequent updates patch from Shawn Green
2003-03-24New build numberBarry Lind
2003-03-24Backport fix for parsing acls (didn't correctly interpret null acl to meanBarry Lind
table owner has privs) Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
2003-03-19Backport patch to work around a server bug. Server incorrectly handles theBarry Lind
following: select 1; commit; set autocommit true; If this is submitted in one call to the server (the select 1 doesn't start a new transaction like it should), however if the select 1 is sent as a separate call then it works correctly. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1Connection.java
2003-03-18Applied translation fixesBarry Lind
Modified Files: Tag: REL7_3_STABLE errors_zh_TW.properties
2003-03-14Backport fix for parsing \n in updateable result sets to 7.3 branchBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java
2003-03-14Backport batch update error message improvements to 7.3 branchBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/errors.properties jdbc/org/postgresql/jdbc2/AbstractJdbc2Statement.java jdbc/org/postgresql/util/PSQLException.java
2003-03-08Back ported patches from head to 7.3 branch (fixes for NPE in result set ↵Barry Lind
absolute() and NPE when logging enabled) Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java jdbc/org/postgresql/util/PSQLException.java
2003-02-27Back patch bug fix to quote function.D'Arcy J.M. Cain
2003-02-24Backport a fix from 7.4 to 7.3 to better handle case in updateable result sets.Barry Lind
This backports part of the fix made in version 1.11. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java
2003-02-12Applied patch to update translation file, submitted by Zhenbang WeiBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/errors_zh_TW.properties
2003-02-12Backport patch from Fernando Nasser and Harald Krake to fix an invalid ↵Barry Lind
datatype problem. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-02-12Backport a patch from Kris Jurka to 7.3. Allows getTables() method to workBarry Lind
against 7.1 servers. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
2003-02-09up build # to 108Barry Lind
2003-02-09Merge changes from head to 7.3 branch: better error message on character set ↵Barry Lind
conversion problems and patch from Kris Jurka for numeric scale Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/errors.properties jdbc/org/postgresql/core/Encoding.java jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
2003-02-04Fix for rollback SQLException from Kris JurkaDave Cramer
2003-02-02Brand 7.3.2.Tom Lane
2003-02-01Prevent core dump from calling Tcl_DontCallWhenDeleted() with a nullTom Lane
interp pointer. Per report from Gerhard Hintermayer.
2003-02-01Apply ljb's patch to prevent both memory leak and core dump duringTom Lane
connection shutdown. This is a grotty workaround for a Tcl bug, but said bug has been there long enough that I'm not holding my breath for a real fix. Per discussions and testing from ljb and g.hintermayer.
2003-01-30Fix regression in .pgpass support. From Neil Conway.Tom Lane
2003-01-21Back-patch typprtlen fix, two other minor post-7.3 fixes.Tom Lane
2003-01-14Bumped up build number to 107Barry Lind
2003-01-14Backport to 7.3 of patch to correctly handle fractional secondsBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1ResultSet.java jdbc/org/postgresql/test/jdbc2/TimestampTest.java
2003-01-14Patch from Kris Jurka to improve the performance of getImportedKeys(). TheBarry Lind
fix uses explicit joins to avoid using the genetic query optimizer for consistent results. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
2003-01-08The second was that renegotiation was just plain broken. I can'tBruce Momjian
believe I didn't notice this before -- once 64k was sent to/from the server the client would crash. Basicly, in 7.3 the server SSL code set the initial state to "about to renegotiate" without actually starting the renegotiation. In addition, the server and client didn't properly handle the SSL_ERROR_WANT_(READ|WRITE) error. This is fixed in the second patch. Nathan Mueller
2003-01-08I was playing around with 7.3.1 and found some more SSL problems. TheBruce Momjian
first, that I missed when checking over 7.3.1, was that the client method was switched to SSLv23 along with the server. The SSLv23 client method does SSLv2 by default, but can also understand SSLv3. In our situation the SSLv2 backwords compatibility is really only needed on the server. This is the first patch. The last thing is that I found a way for the server to understand SSLv2 HELLO messages (sent by pre-7.3 clients) but then get them to talk SSLv3. This is the last one. Nathan Mueller
2003-01-08Fix pgpass to work with PQconnectDB().Bruce Momjian
Backpatch to 7.3.X. Report from ljb.
2003-01-04Translation updatesPeter Eisentraut
2002-12-18From the SSL_CTX_new man page:PostgreSQL Daemon
"SSLv23_method(void), SSLv23_server_method(void), SSLv23_client_method(void) A TLS/SSL connection established with these methods will understand the SSLv2, SSLv3, and TLSv1 protocol. A client will send out SSLv2 client hello messages and will indicate that it also understands SSLv3 and TLSv1. A server will understand SSLv2, SSLv3, and TLSv1 client hello messages. This is the best choice when compatibility is a concern." This will maintain backwards compatibility for those us that don't use TLS connections ...
2002-12-18Stamp 7.3.1.Bruce Momjian
2002-12-13Increment libpq major number for 7.3.1 and minor for 7.4.Bruce Momjian
2002-12-11Bump version for 7.3 and 7.4.Bruce Momjian
2002-12-10Translation updatesPeter Eisentraut
generated by cgit v1.2.3 (git 2.46.0) at 2025-11-28 12:02:19 +0000