summaryrefslogtreecommitdiff
path: root/src/interfaces
AgeCommit message (Collapse)Author
2006-10-10Update libpq.rc for 7.3.16 and 7.4.14. Later releases use libpq.rc.in,Bruce Momjian
which was already updated.
2006-06-23Back-patch 7.4-era fix for memory leak with SSL connections due toTom Lane
missing X509_free() calls. Per a request from a Red Hat customer; seems silly for Red Hat to be shipping a patch that's not in upstream.
2006-05-21Stamp releases 7.3.15, 7.4.13, and 8.0.8.Bruce Momjian
2006-05-21Modify libpq's string-escaping routines to be aware of encoding considerationsTom Lane
and standard_conforming_strings. The encoding changes are needed for proper escaping in multibyte encodings, as per the SQL-injection vulnerabilities noted in CVE-2006-2313 and CVE-2006-2314. Concurrent fixes are being applied to the server to ensure that it rejects queries that may have been corrupted by attempted SQL injection, but this merely guarantees that unpatched clients will fail rather than allow injection. An actual fix requires changing the client-side code. While at it we have also fixed these routines to understand about standard_conforming_strings, so that the upcoming changeover to SQL-spec string syntax can be somewhat transparent to client code. Since the existing API of PQescapeString and PQescapeBytea provides no way to inform them which settings are in use, these functions are now deprecated in favor of new functions PQescapeStringConn and PQescapeByteaConn. The new functions take the PGconn to which the string will be sent as an additional parameter, and look inside the connection structure to determine what to do. So as to provide some functionality for clients using the old functions, libpq stores the latest encoding and standard_conforming_strings values received from the backend in static variables, and the old functions consult these variables. This will work reliably in clients using only one Postgres connection at a time, or even multiple connections if they all use the same encoding and string syntax settings; which should cover many practical scenarios. Clients that use homebrew escaping methods, such as PHP's addslashes() function or even hardwired regexp substitution, will require extra effort to fix :-(. It is strongly recommended that such code be replaced by use of PQescapeStringConn/PQescapeByteaConn if at all feasible.
2006-05-21Change \' to '', for SQL standards compliance. Backpatch to 7.3, 7.4,Bruce Momjian
and 8.0. Later releases already patched.
2006-04-19Fix ancient memory leak in PQprintTuples(); our code no longer uses thisTom Lane
routine, but perhaps some applications do. Found by Martijn van Oosterhout using Coverity.
2006-02-12Stamp releases for 2006-02-14 releaseBruce Momjian
2006-01-05Stamp release 7.3.13.Bruce Momjian
2005-12-13Remove unused HAVE_STRUCT_SOCKCRED code, which was causing a duplicate-Tom Lane
variable-definition error on recent FreeBSDen (evidently, that platform also HAS_STRUCT_CMSGCRED). Backport of 7.4 fix dated 2003-10-25.
2005-12-09Stamp 7.3.12.REL7_3_12Tom Lane
2005-10-03Stamp release 7.3.11.REL7_3_11Tom Lane
2005-07-14Fix mis-backport of libpq memory leak fix. Per Michael Fuhr.Tom Lane
2005-07-13Fix libpq memory leak during PQreset() --- closePGconn() was notTom Lane
freeing all transient state of the PGconn object.
2005-07-08Make libpq_gettext save and restore errno in a Windows-compatible way.Tom Lane
Also, back-patch fix into back branches.
2005-05-05Stamp release 7.3.10.Tom Lane
2005-01-30Stamp release 7.3.9.Tom Lane
2004-10-22Stamp release 7.3.8.REL7_3_8Tom Lane
2004-08-15Stamp 7.3.7.Tom Lane
2004-04-05Translation updatesPeter Eisentraut
2004-03-02Brand 7.3.6.REL7_3_6Tom Lane
2003-12-02Brand 7.3.5.REL7_3_5Tom Lane
2003-11-30Make PQescapeBytea and byteaout consistent with each other, andJoe Conway
octal escape all octets outside the range 0x20 to 0x7e. This fixes the problem pointed out by Sergey Yatskevich here: http://archives.postgresql.org/pgsql-bugs/2003-11/msg00140.php
2003-10-31Back-patch removal of unnecessary inclusion of <crypt.h>, so thatTom Lane
7.3.5 will build out-of-the-box on Solaris.
2003-08-22Sigh, I'm an idiot ... SSL_ERROR_WANT_READ isn't an error conditionTom Lane
at all, it just means 'no data available yet'.
2003-08-07Backport to 7.3. Third try to fix the sql injectionBarry Lind
vulnerability. This fix completely removes the ability (hack) of being able to bind a list of values in an in clause. It was demonstrated that by allowing that functionality you open up the possibility for certain types of sql injection attacks. The previous fix attempts all focused on preventing the insertion of additional sql statements (the semi-colon problem: xxx; any new sql statement here). But that still left the ability to change the where clause on the current statement or perform a subselect which can circumvent applicaiton security logic and/or allow you to call any stored function. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-08-04Fix some more problems with testing error returns from SSL.Tom Lane
2003-07-23Patch to fix additional SQL injection vulnerabilities reported by Oliver JowettBarry Lind
and Dmitry Tkach Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-07-23Stamp 7.3.4 release.Bruce Momjian
2003-07-22Fix to prevent SQL injection attacks when calling setObject(int,Object,int)Barry Lind
where the Object is a String and the type is numeric (i.e. INTEGER,LONG,etc). The fix applies the standard escaping for these values. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/Driver.java.in jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-05-22Brand 7.3.3.Tom Lane
2003-05-19Upped JDBC build number to 110 for the 7.3.3 releaseBarry Lind
Modified Files: Tag: REL7_3_STABLE Driver.java.in
2003-05-18Small translation updates for 7.3.3 release.Peter Eisentraut
2003-04-17Applied patches from Kris Jurka fixing a string tokenizing problem andBarry Lind
fixing an order by problem for index metadata results. Also includes removing some unused code as well as a fix to the toString method on statement. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-04-10Fix error recovery for SSL_read/SSL_write calls.Tom Lane
2003-04-08added addDataType to the interfaceDave Cramer
2003-03-25fixed problem where information from previous updates was leaking into ↵Dave Cramer
subsequent updates patch from Shawn Green, slightly modified
2003-03-25added DISTINCT to the query to get cross reference. This is required when ↵Dave Cramer
two columns in a table are both foreign keys to another table. From Peter Royal proyal@pace2020.com
2003-03-25fixed problem where information from previous updates was leaking into ↵Dave Cramer
subsequent updates patch from Shawn Green
2003-03-24New build numberBarry Lind
2003-03-24Backport fix for parsing acls (didn't correctly interpret null acl to meanBarry Lind
table owner has privs) Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
2003-03-19Backport patch to work around a server bug. Server incorrectly handles theBarry Lind
following: select 1; commit; set autocommit true; If this is submitted in one call to the server (the select 1 doesn't start a new transaction like it should), however if the select 1 is sent as a separate call then it works correctly. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1Connection.java
2003-03-18Applied translation fixesBarry Lind
Modified Files: Tag: REL7_3_STABLE errors_zh_TW.properties
2003-03-14Backport fix for parsing \n in updateable result sets to 7.3 branchBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java
2003-03-14Backport batch update error message improvements to 7.3 branchBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/errors.properties jdbc/org/postgresql/jdbc2/AbstractJdbc2Statement.java jdbc/org/postgresql/util/PSQLException.java
2003-03-08Back ported patches from head to 7.3 branch (fixes for NPE in result set ↵Barry Lind
absolute() and NPE when logging enabled) Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java jdbc/org/postgresql/util/PSQLException.java
2003-02-27Back patch bug fix to quote function.D'Arcy J.M. Cain
2003-02-24Backport a fix from 7.4 to 7.3 to better handle case in updateable result sets.Barry Lind
This backports part of the fix made in version 1.11. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc2/AbstractJdbc2ResultSet.java
2003-02-12Applied patch to update translation file, submitted by Zhenbang WeiBarry Lind
Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/errors_zh_TW.properties
2003-02-12Backport patch from Fernando Nasser and Harald Krake to fix an invalid ↵Barry Lind
datatype problem. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1Statement.java
2003-02-12Backport a patch from Kris Jurka to 7.3. Allows getTables() method to workBarry Lind
against 7.1 servers. Modified Files: Tag: REL7_3_STABLE jdbc/org/postgresql/jdbc1/AbstractJdbc1DatabaseMetaData.java
generated by cgit v1.2.3 (git 2.46.0) at 2025-11-08 23:00:35 +0000