gopkg/pgx
2
0
Fork 0
Code Activity
Files
adbb38f298c76e283ffc7c7a3f571036fea47fd4
pgx/pgproto3
T
History
Jack Christensen adbb38f298 Do not allow protocol messages larger than ~1GB 
The PostgreSQL server will reject messages greater than ~1 GB anyway.
However, worse than that is that a message that is larger than 4 GB
could wrap the 32-bit integer message size and be interpreted by the
server as multiple messages. This could allow a malicious client to
inject arbitrary protocol messages.

https://github.com/jackc/pgx/security/advisories/GHSA-mrww-27vc-gghv
2024-03-04 09:09:29 -06:00
..
example/pgfortune
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
testdata/fuzz/FuzzFrontend
Better fuzz testing and fix several bugs it found
2022-07-23 16:13:06 -05:00
authentication_cleartext_password.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_gss_continue.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_gss.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_md5_password.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_ok.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_sasl_continue.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_sasl_final.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
authentication_sasl.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
backend_key_data.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
backend_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
backend.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
big_endian.go
Move pgproto3 to subdirectory
2022-02-21 11:57:34 -06:00
bind_complete.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
bind_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
bind.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
cancel_request.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
chunkreader_test.go
Use bytes.Equal rather than bytes.Compare ==/!= 0
2023-07-08 12:08:05 -05:00
chunkreader.go
iobufpool uses *[]byte instead of []byte to reduce allocations
2023-01-28 08:02:49 -06:00
close_complete.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
close.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
command_complete.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_both_response_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_both_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_data.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_done.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_fail.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_in_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
copy_out_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
data_row.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
describe.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
doc.go
Spelling and grammar fixes
2023-10-07 09:26:23 -05:00
empty_query_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
error_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
execute.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
flush.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
frontend_test.go
Make Chunkreader an internal implementation detail
2022-02-26 08:50:46 -06:00
frontend.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
function_call_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
function_call_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
function_call.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
fuzz_test.go
Better fuzz testing and fix several bugs it found
2022-07-23 16:13:06 -05:00
gss_enc_request.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
gss_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
json_test.go
Merge remote-tracking branch 'pgproto3/master' into v5-dev
2022-04-23 10:43:48 -05:00
no_data.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
notice_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
notification_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
parameter_description.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
parameter_status.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
parse_complete.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
parse.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
password_message.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
pgproto3_private_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
pgproto3.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
portal_suspended.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
query_test.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
query.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
README.md
Spelling and grammar fixes
2023-10-07 09:26:23 -05:00
ready_for_query.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
row_description.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
sasl_initial_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
sasl_response.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
ssl_request.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
startup_message.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
sync.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
terminate.go
Do not allow protocol messages larger than ~1GB
2024-03-04 09:09:29 -06:00
trace_test.go
Drastically increase allowed test times for potato CI
2023-07-11 21:16:08 -05:00
trace.go
Fix data race when pgproto3 trace is enabled during CopyFrom
2023-08-05 07:30:59 -05:00

README.md

pgproto3

Package pgproto3 is an encoder and decoder of the PostgreSQL wire protocol version 3.

pgproto3 can be used as a foundation for PostgreSQL drivers, proxies, mock servers, load balancers and more.

See example/pgfortune for a playful example of a fake PostgreSQL server.

View Git Blame Copy Permalink