Received: from malur.postgresql.org ([217.196.149.56]) by arkaria.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fDFcf-0007pS-Iz for pgsql-bugs@arkaria.postgresql.org; Mon, 30 Apr 2018 20:42:09 +0000 Received: from localhost ([127.0.0.1] helo=malur.postgresql.org) by malur.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fDFce-00064E-FT for pgsql-bugs@arkaria.postgresql.org; Mon, 30 Apr 2018 20:42:08 +0000 Received: from magus.postgresql.org ([2a02:c0:301:0:ffff::29]) by malur.postgresql.org with esmtps (TLS1.2:ECDHE_RSA_AES_256_CBC_SHA384:256) (Exim 4.89) (envelope-from ) id 1fDFce-000645-9M for pgsql-bugs@lists.postgresql.org; Mon, 30 Apr 2018 20:42:08 +0000 Received: from wrigleys.postgresql.org ([204.145.124.246]) by magus.postgresql.org with esmtp (Exim 4.89) (envelope-from ) id 1fDFcZ-00060f-No for pgsql-bugs@lists.postgresql.org; Mon, 30 Apr 2018 20:42:07 +0000 Content-Type: multipart/mixed; boundary="===============8331368484300666811==" MIME-Version: 1.0 Subject: BUG #15182: Canceling authentication due to timeout aka Denial of Service Attack To: pgsql-bugs@lists.postgresql.org From: =?utf-8?q?PG_Bug_reporting_form?= Cc: lalbin@scharp.org Reply-To: lalbin@scharp.org, pgsql-bugs@lists.postgresql.org Date: Mon, 30 Apr 2018 20:41:11 +0000 Message-ID: <152512087100.19803.12733865831237526317@wrigleys.postgresql.org> List-Id: List-Help: List-Subscribe: List-Post: List-Owner: List-Archive: Precedence: bulk --===============8331368484300666811== Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 VGhlIGZvbGxvd2luZyBidWcgaGFzIGJlZW4gbG9nZ2VkIG9uIHRoZSB3ZWJzaXRlOgoKQnVnIHJl ZmVyZW5jZTogICAgICAxNTE4MgpMb2dnZWQgYnk6ICAgICAgICAgIExsb3lkIEFsYmluCkVtYWls IGFkZHJlc3M6ICAgICAgbGFsYmluQHNjaGFycC5vcmcKUG9zdGdyZVNRTCB2ZXJzaW9uOiAxMC4z Ck9wZXJhdGluZyBzeXN0ZW06ICAgT3BlblNVU0UKRGVzY3JpcHRpb246ICAgICAgICAKCk92ZXIg dGhlIGxhc3Qgc2V2ZXJhbCB3ZWVrcyBvdXIgZGV2ZWxvcGVycyBjYXVzZWQgYSBEZW5pYWwgb2Yg U2VydmljZSBBdHRhY2sKYWdhaW5zdCBvdXJzZWx2ZXMgYnkgYWNjaWRlbnQuIFdoZW4gbG9va2lu ZyBhdCB0aGUgbG9nIGZpbGVzLCBJIG5vdGljZWQgdGhhdAp3ZSBoYWQgYXV0aGVudGljYXRpb24g dGltZW91dHMgZHVyaW5nIHRoZXNlIHRpbWUgcGVyaW9kcy4gSW4gcmVzZWFyY2hpbmcgdGhlCnBy b2JsZW0gSSBmb3VuZCB0aGlzIGlzIGR1ZSB0byBsb2NrcyBiZWluZyBoZWxkIG9uIHNoYXJlZCBz eXN0ZW0gY2F0YWxvZwppdGVtcywgYWthIHN5c3RlbSBjYXRhbG9nIGl0ZW1zIHRoYXQgYXJlIHNo YXJlZCBiZXR3ZWVuIGFsbCBkYXRhYmFzZXMgb24gdGhlCnNhbWUgY2x1c3Rlci9zZXJ2ZXIuIFRo aXMgY2FuIGJlIGNhdXNlZCBieSBiZWdpbm5pbmcgYSBsb25nIHJ1bm5pbmcKdHJhbnNhY3Rpb24g dGhhdCBxdWVyaWVzIHBnX3N0YXRfYWN0aXZpdHksIHBnX3JvbGVzLCBwZ19kYXRhYmFzZSwgZXRj IGFuZAp0aGVuIGFub3RoZXIgY29ubmVjdGlvbiB0aGF0IHJ1bnMgZWl0aGVyIGEgUkVJTkRFWCBE QVRBQkFTRSwgUkVJTkRFWCBTWVNURU0sCm9yIFZBQ1VVTSBGVUxMLiBUaGlzIGlzc3VlIGlzIG9m IHBhcnRpY3VsYXIgaW1wb3J0YW5jZSB0byBkYXRhYmFzZSByZXNlbGxlcnMKd2hvIHVzZSB0aGUg c2FtZSBjbHVzdGVyL3NlcnZlciBmb3IgbXVsdGlwbGUgY2xpZW50cywgYXMgdHdvIGNsaWVudHMg Y2FuCmNhdXNlIHRoaXMgaXNzdWUgdG8gaGFwcGVuIGluYWR2ZXJ0ZW50bHkgb3IgYSBzaW5nbGUg Y2xpZW50IGNhbiBlaXRoZXIgY2F1c2UKaXQgdG8gaGFwcGVuIG1hbGljaW91c2x5IG9yIGluYWR2 ZXJ0ZW50bHkuIE5vdGU6IFRoZSBsYXJnZSBjbG91ZCBwcm92aWRlcnMKZ2l2ZSBlYWNoIG9mIHRo ZWlyIGNsaWVudHMgdGhlaXIgb3duIGNsdXN0ZXIvc2VydmVyIHNvIHRoaXMgd2lsbCBub3QgYWZm ZWN0CmFjcm9zcyBjbG91ZCBjbGllbnRzIGJ1dCBjYW4gYWZmZWN0IGFuIGluZGl2aWR1YWwgY2xp ZW50LiBUaGUgcHJvYmxlbSBpcwp0aGF0IHRyYWRpdGlvbmFsIGhvc3RpbmcgY29tcGFuaWVzIHdp bGwgaGF2ZSBhbGwgY2xpZW50cyBmcm9tIG9uZSBvciBtb3JlCndlYiBzZXJ2ZXJzIHNoYXJlIHRo ZSBzYW1lIFBvc3RncmVTUUwgY2x1c3Rlci9zZXJ2ZXIuIFRoaXMgbWVhbnMgdGhhdCBvbmUgb3IK dHdvIGNsaWVudHMgY291bGQgaW5hZHZlcnRlbnRseSBzdG9wIGFsbCB0aGUgb3RoZXIgY2xpZW50 cyBmcm9tIGJlaW5nIGFibGUKdG8gY29ubmVjdCB0byB0aGVpciBkYXRhYmFzZXMgdW50aWwgdGhl IGZpcnN0IGNsaWVudCBkb2VzIGVpdGhlciBhIENPTU1JVCBvcgpST0xMQkFDSyBvZiB0aGVpciB0 cmFuc2FjdGlvbiB3aGljaCB0aGV5IGNvdWxkIGhvbGQgb3BlbiBmb3IgaG91cnMsIHdoaWNoIGlz CndoYXQgaGFwcGVuZWQgdG8gdXMgaW50ZXJuYWxseS4NCg0KSW4gQ29ubmVjdGlvbiAxIHdlIG5l ZWQgdG8gQkVHSU4gYSB0cmFuc2FjdGlvbiBhbmQgdGhlbiBxdWVyeSBhIHNoYXJlZApzeXN0ZW0g aXRlbTsgcGdfYXV0aGlkLCBwZ19kYXRhYmFzZSwgZXRjOyBvciBhIHZpZXcgdGhhdCBkZXBlbmRz IG9uIGEgc2hhcmVkCnN5c3RlbSBpdGVtOyBwZ19zdGF0X2FjdGl2aXR5LCBwZ19yb2xlcywgZXRj LiBPdXIgZGV2ZWxvcGVycyB3ZXJlIGFjY2Vzc2luZwpwZ19yb2xlcy4NCg0KQ29ubmVjdGlvbiAx IChBbnkgZGF0YWJhc2UsIEFueSBVc2VyKQ0KQkVHSU47DQpTRUxFQ1QgKiBGUk9NIHBnX3N0YXRf YWN0aXZpdHk7DQoNCkNvbm5lY3Rpb24gMiAoQW55IGRhdGFiYXNlIHdpbGwgZG8gYXMgbG9uZyBh cyB5b3UgYXJlIHRoZSBkYXRhYmFzZSBvd25lcikNClJFSU5ERVggREFUQUJBU0UgcG9zdGdyZXM7 DQoNCkNvbm5lY3Rpb24gMyAoQW55IERhdGFiYXNlLCBBbnkgVXNlcikNCnBzcWwgLWggc3FsdGVz dC1hbHQgLWQgc2FuZGJveA0KDQpBbGwgZnV0dXJlIENvbm5lY3Rpb24gMydzIHdpbGwgaGFuZyBm b3IgaG93ZXZlciBsb25nIHRoZSB0cmFuc2FjdGlvbiBpbgpDb25uZWN0aW9uIDEgcnVucy4gSW4g b3VyIGNhc2UgdGhpcyB3YXMgaG91cnMgYW5kIGRlbmllZCBldmVyeWJvZHkgZWxzZSB0aGUKYWJp bGl0eSB0byBsb2cgaW50byB0aGUgc2VydmVyIHVudGlsIENvbm5lY3Rpb24gMSB3YXMgY29tbWl0 dGVkLiBwc3FsIHdpbGwKanVzdCBoYW5nIGZvciBob3VycywgZXZlbiBvdmVybmlnaHQgaW4gbXkg dGVzdGluZywgYnV0IG91ciBhcHBzIHdvdWxkIGdldAp0aGUgIkNhbmNlbGluZyBhdXRoZW50aWNh dGlvbiBkdWUgdG8gdGltZW91dCIgYWZ0ZXIgMSBtaW51dGUuDQoNCkNvbm5lY3Rpb24gMiBjYW4g YWxzbyBkbyBhbnkgb2YgdGhlc2UgY29tbWFuZHMgdG8gYWxzbyBjYXVzZSB0aGUgc2FtZQppc3N1 ZToNClJFSU5ERVggU1lTVEVNIHBvc3RncmVzOw0KVkFDVVVNIEZVTEwgcGdfYXV0aGlkOw0KdmFj dXVtZGIgLWYgLWggc3FsdGVzdC1hbHQgLWQgbGxveWQgLVUgbGFsYmluDQoNCkV2ZW4gd29yc2Ug aXMgdGhhdCB0aGUgVkFDVVVNIEZVTEwgcGdfYXV0aGlkOyBjYW4gYmUgc3RhcnRlZCBieSBhbgp1 bnByaXZpbGVnZWQgdXNlciBhbmQgaXQgd2lsbCB3YWl0IGZvciB0aGUgQWNjZXNzU2hhcmVMb2Nr IGJ5IGNvbm5lY3Rpb24gMQp0byBiZSByZWxlYXNlZCBiZWZvcmUgcmV0dXJuaW5nIHRoZSBlcnJv ciB0aGF0IHlvdSBkb24ndCBoYXZlIHBlcm1pc3Npb24gdG8KcGVyZm9ybSB0aGlzIGFjdGlvbiwg c28gZXZlbiBhbiB1bnByaXZpbGVnZWQgdXNlciBjYW4gY2F1c2UgdGhpcyB0byBoYXBwZW4uClRo ZSBwcml2aWxlZ2UgY2hlY2sgbmVlZHMgdG8gaGFwcGVuIGJlZm9yZSB0aGUgd2FpdGluZyBmb3Ig dGhlCkFjY2Vzc0V4Y2x1c2l2ZUxvY2sgaGFwcGVucy4NCg0KVGhpcyBidWcgcmVwb3J0IGhhcyBi ZWVuIHNpbXBsaWZpZWQgYW5kIHNob3J0ZWQgZHJhc3RpY2FsbHkuIFRvIHJlYWQgdGhlCmZ1bGwg aW5mb3JtYXRpb24gYWJvdXQgdGhpcyBpc3N1ZSBwbGVhc2Ugc2VlIG15IGJsb2cgcG9zdDoNCmh0 dHA6Ly9sbG95ZC50aGVhbGJpbnMuY29tL0NhbmNlbGluZyUyMGF1dGhlbnRpY2F0aW9uJTIwZHVl JTIwdG8lMjB0aW1lb3V0DQoNCkxsb3lkIEFsYmluDQpEYXRhYmFzZSBBZG1pbmlzdHJhdG9yDQpT dGF0aXN0aWNhbCBDZW50ZXIgZm9yIEhJVi9BSURTIFJlc2VhcmNoIGFuZCBQcmV2ZW50aW9uIChT Q0hBUlApDQpGcmVkIEh1dGNoaW5zb24gQ2FuY2VyIFJlc2VhcmNoIENlbnRlcgoK --===============8331368484300666811==--