Mirror/zeek
1
0
Fork 0
mirror of https://github.com/zeek/zeek.git synced 2025-10-02 06:38:20 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions 1

Merge remote-tracking branch 'amazing-pp/t/psql-login-no-role'

Browse source 
* amazing-pp/t/psql-login-no-role:
  Report PostgreSQL login success only after ReadyForQuery
This commit is contained in:
Arne Welzel 2025-08-18 09:40:05 +02:00
commit e04f725523
7 changed files with 45 additions and 5 deletions
Download patch file Download diff file Expand all files Collapse all files

16
CHANGES
View file

@ -1,3 +1,19 @@
8.1.0-dev.76 | 2025-08-18 09:40:05 +0200
* Report PostgreSQL login success only after ReadyForQuery (Fupeng Zhao)
Previously, Zeek treated the receipt of `AuthenticationOk` as a
successful login. However, according to the PostgreSQL
Frontend/Backend Protocol, the startup phase is not complete until
the server sends `ReadyForQuery`. It is still possible for the server
to emit an `ErrorResponse` (e.g. ERRCODE_INVALID_AUTHORIZATION_SPECIFICATION)
after `AuthenticationOk` but before `ReadyForQuery`.
This change updates the PostgreSQL analyzer to defer reporting login
success until `ReadyForQuery` is observed. This prevents false
positives in cases where authentication succeeds but session startup
fails.
8.1.0-dev.74 | 2025-08-17 17:28:59 +0200
* maintenance updates for ZAM BiF-tracking (Vern Paxson, Corelight)