Re: BUG #15182: Canceling authentication due to timeout aka Denial ofService Attack

Поиск
Список
Период
Сортировка
От Bossart, Nathan
Тема Re: BUG #15182: Canceling authentication due to timeout aka Denial ofService Attack
Дата
Msg-id E5CF1BFB-322D-41AE-ACFC-237730A9E110@amazon.com
обсуждение исходный текст
Ответ на Re: BUG #15182: Canceling authentication due to timeout aka Denialof Service Attack  (Michael Paquier <michael@paquier.xyz>)
Ответы Re: BUG #15182: Canceling authentication due to timeout aka Denial ofService Attack
Re: BUG #15182: Canceling authentication due to timeout aka Denialof Service Attack
Список pgsql-hackers
I took a look at 0001.

On 7/26/18, 12:24 AM, "Michael Paquier" <michael@paquier.xyz> wrote:
> 1) 0001 does the work for TRUNCATE, but using RangeVarGetRelidExtended
> with a custom callback based on the existing truncate_check_rel().  I
> had to split the session-level checks into a separate routine as no
> Relation is available, but that finishes by being a neat result without
> changing any user-facing behavior.

Splitting the checks like this seems reasonable.  As you pointed out,
it doesn't change the behavior of the session checks, which AFAICT
aren't necessary for the kind of permissions checks we want to add to
the RangeVarGetRelidExtended() call.

-        myrelid = RelationGetRelid(rel);
+        myrelid = RangeVarGetRelidExtended(rv, AccessExclusiveLock,
+                                           false, RangeVarCallbackForTruncate,
+                                           NULL);

Should the flags argument be 0 instead of false?

+    /* Nothing to do if the relation was not found. */
+    if (!OidIsValid(relId))
+        return;
+
+    tuple = SearchSysCache1(RELOID, ObjectIdGetDatum(relId));
+    if (!HeapTupleIsValid(tuple))    /* should not happen */
+        elog(ERROR, "cache lookup failed for relation %u", relId);

The first time we use this callback, the relation won't be locked, so
isn't it possible that we won't get a valid tuple here?  I did notice
that callbacks like RangeVarCallbackForRenameRule,
RangeVarCallbackForPolicy, and RangeVarCallbackForRenameTrigger assume
that the relation can be concurrently dropped, but
RangeVarCallbackOwnsRelation does not.  Instead, we assume that the
syscache search will succeed if the given OID is valid.  Is this a
bug, or am I missing something?

Nathan


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Nikhil Sontakke
Дата:
Сообщение: Re: [HACKERS] logical decoding of two-phase transactions
Следующее
От: Dmitry Dolgov
Дата:
Сообщение: Re: [HACKERS] advanced partition matching algorithm forpartition-wise join