Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-18 Thread Tatsuo Ishii
Ok, understood. -- Tatsuo Ishii SRA OSS, Inc. Japan > Tatsuo Ishii <[EMAIL PROTECTED]> writes: > > One of our engineer claimed that double free bug itself is a > > vulnerability, thus 8.2.1 release should be called as "security > > release". > > [ shrug... ] AFAICS the crashing bugs we fixed in

Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-18 Thread Tom Lane
Tatsuo Ishii <[EMAIL PROTECTED]> writes: > One of our engineer claimed that double free bug itself is a > vulnerability, thus 8.2.1 release should be called as "security > release". [ shrug... ] AFAICS the crashing bugs we fixed in 8.2.1 can't be exploited for anything beyond crashing the backend

Re: [HACKERS] [COMMITTERS] pgsql: Fix failure due to accessing an

2007-01-17 Thread Tatsuo Ishii
Tom, Is this a fix for security hole/vulnerability? One of our engineer claimed that double free bug itself is a vulnerability, thus 8.2.1 release should be called as "security release". -- Tatsuo Ishii SRA OSS, Inc. Japan > Log Message: > --- > Fix failure due to accessing an already-fre