2
0
mirror of https://git.postgresql.org/git/postgresql.git synced 2025-02-17 19:30:00 +08:00

Only show source file and line numbers to superusers, for consistent

security level with other parts of the system.

Per gripe from Tom
This commit is contained in:
Magnus Hagander 2008-09-23 21:12:03 +00:00
parent 5f7b25d5d5
commit cdf5357ec9

View File

@ -10,7 +10,7 @@
* Written by Peter Eisentraut <peter_e@gmx.net>. * Written by Peter Eisentraut <peter_e@gmx.net>.
* *
* IDENTIFICATION * IDENTIFICATION
* $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.472 2008/09/10 19:16:22 tgl Exp $ * $PostgreSQL: pgsql/src/backend/utils/misc/guc.c,v 1.473 2008/09/23 21:12:03 mha Exp $
* *
*-------------------------------------------------------------------- *--------------------------------------------------------------------
*/ */
@ -6176,8 +6176,12 @@ GetConfigOptionByNum(int varnum, const char **values, bool *noshow)
break; break;
} }
/* If the setting came from a config file, set the source location */ /*
if (conf->source == PGC_S_FILE) * If the setting came from a config file, set the source location.
* For security reasons, we don't show source file/line number for
* non-superusers.
*/
if (conf->source == PGC_S_FILE && superuser())
{ {
values[12] = conf->sourcefile; values[12] = conf->sourcefile;
snprintf(buffer, sizeof(buffer), "%d", conf->sourceline); snprintf(buffer, sizeof(buffer), "%d", conf->sourceline);