Re: Replay attack of query cancel

Поиск
Список
Период
Сортировка
От Tom Lane
Тема Re: Replay attack of query cancel
Дата
Msg-id 18802.1218229771@sss.pgh.pa.us
обсуждение исходный текст
Ответ на Re: Replay attack of query cancel  (Magnus Hagander <magnus@hagander.net>)
Ответы Re: Replay attack of query cancel  (Magnus Hagander <magnus@hagander.net>)
Список pgsql-hackers
Magnus Hagander <magnus@hagander.net> writes:
> The problem was (third IIRC here :-P) in other clients, such as the JDBC
> driver (I think that one was checked specifically) which currently only
> accept the BackendKeyData message during startup. All drivers not based
> on libpq would have to be checked and potentially updated, but it's
> sitll a lot easier than DHing or so.

The other problem was getting the new cancel key from the postmaster to
the backend and thence to the client (hopefully in a timely manner),
recognizing that (a) we don't want the postmaster touching shared memory
very much, and certainly not engaging in any locking behavior; (b)
backends feel free to ignore SIGINT when they're not doing anything.

Certainly the prospect of a de facto protocol change is the bigger
problem, but there are nontrivial implementation issues in the server
too.

If we were going to make it a de jure protocol change (ie new version
number) instead of just hoping nobody notices the behavioral difference,
I'd be inclined to think about widening the cancel key, too.  32 bits
ain't that much randomness anymore.
        regards, tom lane


В списке pgsql-hackers по дате отправления:

Предыдущее
От: Magnus Hagander
Дата:
Сообщение: Re: Replay attack of query cancel
Следующее
От: "Kevin Grittner"
Дата:
Сообщение: Re: IN vs EXISTS equivalence