Skip site navigation (1) Skip section navigation (2)

Peripheral Links

Header And Logo

PostgreSQL
| The world's most advanced open source database.

Site Navigation

Search for
  Advanced Search

Re: "Truncated" tuples for tuple hash tables


  • From: "Bort, Paul" <pbort(at)tmwsystems(dot)com>
  • To: <pgsql-hackers(at)postgreSQL(dot)org>
  • Subject: Re: "Truncated" tuples for tuple hash tables
  • Date: Mon, 26 Jun 2006 11:28:43 -0400
  • Message-id: <DB106B1B5B8F734B8FF3E155A3A556C202D4FC40(at)clemail1(dot)tmwsystems(dot)com>

Tom Lane said:
> 
> To make use of a TruncatedTuple, we'd set up a temporary HeapTupleData
> struct with its t_data field pointing 16 bytes before the start of the
> TruncatedTuple.  As long as the code using it never tries to 
> access any
> of the missing fields (t_xmin through t_ctid), this would work exactly
> like a normal HeapTuple.
> 

This sounds like a security risk. What's the worst thing that could be
in
those 16 bytes, and could that be used to bite (sorry) us? 

If those 16 bytes could be user data in another tuple, there might be an
attack there.




Home | Main Index | Thread Index

Privacy Policy | PostgreSQL Archives hosted by Command Prompt, Inc. | Designed by tinysofa
Copyright © 1996 – 2008 PostgreSQL Global Development Group