Project

General

Profile

Actions
Copy link

Bug #8900

open
JF JF

pgsql: consolidated data row data tx never reset for requests

Bug #8900: pgsql: consolidated data row data tx never reset for requests

Added by Juliana Fajardini Reichow 6 days ago. Updated 5 days ago.

Status:
Assigned
Priority:
Normal
Assignee:
Juliana Fajardini Reichow
Target version:
9.0.0-beta1
Affected Versions:
Effort:
Difficulty:
Label:

Description

After consolidating all data rows for a frontend message and pushing that into
the transaction's requests array, the transaction data is never reset (as it happens
for the response side).

This Could lead to wrong values for a "CommandComplete" message after a CopyFromStdIn transaction.

The fix must take into consideration not only the consolidation completion, as well as the previous state progress, to prevent data manipulation from attackers injecting a fake CopyDone and thus faking data_row info from the backend side as well, as these fields are stored per-transaction, not per-direction.

JF Updated by Juliana Fajardini Reichow 6 days ago Actions
Copy link
 #1

  • Target version changed from TBD to 9.0.0-beta1

JF Updated by Juliana Fajardini Reichow 5 days ago Actions
Copy link
 #2

  • Subject changed from pgsql: consolidated data row never reset for tx's request to pgsql: consolidated data row data tx never reset for requests
  • Status changed from New to Assigned
Actions
Copy link

Also available in: PDF Atom