regex DoS in postgresql?

Поиск
Список
Период
Сортировка
Искать
От
Stuart McGraw
Тема
regex DoS in postgresql?
Дата
Msg-id
dbc6cd12-8147-a66d-9471-eed4df3a8292@mtneva.com
Список
Дерево обсуждения
regex DoS in postgresql? Stuart McGraw <smcg4191@mtneva.com>
Re: regex DoS in postgresql? Tom Lane <tgl@sss.pgh.pa.us>
I would like to deploy a web application with a Postgresql backend
that allows a user to both add a record containing arbitrary text,
and to search that text column with an arbitrary regular expression.

My question is, is the app subject to a regex denial of service attack?

I would have presumed so but I have been unable produce any problems
when testing using the "evil" regexs described in the Wikipedia
article on the subject: https://en.wikipedia.org/wiki/ReDoS

Is there something in the way Postgresql implements its RE engine
that makes it immune to this attack?

Thanks for any enlightenment...

В списке pgsql-general по дате отправления
От: Eugen Stan
Дата:
Сообщение: support for JSON Web Token
От: Tom Lane
Дата:
Сообщение: Re: regex DoS in postgresql?
FAQ