Help needed with a reproducer for CVE-2020-25695 not based on REFRESH MATERIALIZED VIEW

Поиск
Список
Период
Сортировка
От Patrik Novotny
Тема Help needed with a reproducer for CVE-2020-25695 not based on REFRESH MATERIALIZED VIEW
Дата
Msg-id CAE_EZkgBj6kt4XdOTM=Tq-7teu8y9uf-XCEPVQMz=fhFwYQ4WA@mail.gmail.com
обсуждение исходный текст
Ответы Re: Help needed with a reproducer for CVE-2020-25695 not based on REFRESH MATERIALIZED VIEW
Список pgsql-hackers
Hi,

I need to reproduce the CVE-2020-25695 on PostgreSQL 9.2.24. I know this is not a supported version, however, it is important for us to have a reproducer for this version as well.

The reproducer for supported versions[1] is based on REFRESH MATERIALIZED VIEW which is not implemented until version 9.3.

I was trying to reproduce this using ANALYZE as you can see in this poc.sql file[2]. However, it doesn't reproduce the issue.

It would be really appreciated if someone could take a look at it and help.

В списке pgsql-hackers по дате отправления:

Предыдущее
От: Matthias van de Meent
Дата:
Сообщение: Re: MaxOffsetNumber for Table AMs
Следующее
От: Amit Langote
Дата:
Сообщение: Re: ALTER TABLE .. DETACH PARTITION CONCURRENTLY