GOMODULES/pgx
1
0
Fork 0
mirror of https://github.com/jackc/pgx.git synced 2025-04-27 21:25:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
3,789 Commits 61 Branches 101 Tags
Commit Graph

2 Commits

Author SHA1 Message Date
Jack Christensen
adbb38f298 Do not allow protocol messages larger than ~1GB 
The PostgreSQL server will reject messages greater than ~1 GB anyway.
However, worse than that is that a message that is larger than 4 GB
could wrap the 32-bit integer message size and be interpreted by the
server as multiple messages. This could allow a malicious client to
inject arbitrary protocol messages.

https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
 2024-03-04 09:09:29 -06:00
Jack Christensen
a92f1df1df Merge remote-tracking branch 'pgproto3/master' into v5-dev 
Pull in pgproto3 changes and update for pgx v5
 2022-04-23 10:43:48 -05:00