GOMODULES/pgx - pgx - Tiburons git server

Commit Graph

Author	SHA1	Message	Date
Jack Christensen	adbb38f298	Do not allow protocol messages larger than ~1GB The PostgreSQL server will reject messages greater than ~1 GB anyway. However, worse than that is that a message that is larger than 4 GB could wrap the 32-bit integer message size and be interpreted by the server as multiple messages. This could allow a malicious client to inject arbitrary protocol messages. https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv	2024-03-04 09:09:29 -06:00
Jack Christensen	a92f1df1df	Merge remote-tracking branch 'pgproto3/master' into v5-dev Pull in pgproto3 changes and update for pgx v5	2022-04-23 10:43:48 -05:00

Author

SHA1

Message

Date

Jack Christensen

adbb38f298

Do not allow protocol messages larger than ~1GB

The PostgreSQL server will reject messages greater than ~1 GB anyway.
However, worse than that is that a message that is larger than 4 GB
could wrap the 32-bit integer message size and be interpreted by the
server as multiple messages. This could allow a malicious client to
inject arbitrary protocol messages.

https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv

2024-03-04 09:09:29 -06:00

Jack Christensen

a92f1df1df

Merge remote-tracking branch 'pgproto3/master' into v5-dev

Pull in pgproto3 changes and update for pgx v5

2022-04-23 10:43:48 -05:00

2 Commits (ec9840620789766dd065077d314b92cbbaf02ec8)