Re: Building PostgreSQL old version from source to test vulnerability CVE-2017-7546

2018-02-22 Thread Julián Jiménez González
Thanks for your answer Christoph. I've tried to do that but I can't debug it inside GDB. I configured like so: CFLAGS="-O0 -g" ./configure --enable-debug As I found suggested in a SO thread. Then made and installed, and when I launch gdb either like gdb --args /usr/local/pgsql/bin/postgres -D /u

Re: Building PostgreSQL old version from source to test vulnerability CVE-2017-7546

2018-02-22 Thread Christoph Berg
Re: Julián Jiménez González 2018-02-21 > I need and would greatly appreciate any help tracking this problem down. I'd try setting gdb breakpoints on the relevant code lines/functions. If it helps, old Ubuntu packages are available there: http://atalia.postgresql.org/morgue/ https://wiki.postgre

Building PostgreSQL old version from source to test vulnerability CVE-2017-7546

2018-02-21 Thread Julián Jiménez González
Hello. I'm trying to build a vulnerable PostgreSQL system in a Docker container in order to be able to exploit this vulnerability . I'm testing with a C# app which simply connects using a *connstring* through *npgsql *driver (this is one