Re: pgcrypto decrypt_iv() issue - Mailing list pgsql-bugs

From Tom Lane
Subject Re: pgcrypto decrypt_iv() issue
Date
Msg-id 10056.1327684401@sss.pgh.pa.us
Whole thread Raw
In response to Re: pgcrypto decrypt_iv() issue  (Marko Kreen <markokr@gmail.com>)
Responses Re: pgcrypto decrypt_iv() issue  (Marko Kreen <markokr@gmail.com>)
List pgsql-bugs
Marko Kreen <markokr@gmail.com> writes:
> pgcrypto.c is easily fixable and internal.c has proper checks.
> But openssl.c does not.  And I have a bigger openssl.c cleanup
> pending.  So I would prefer to add missing checks to cleaned-up
> openssl.c and post them together (soonish).

> But I'm bit unclear about fate of /contrib cleanup patches vs. 9.2,
> so if they won't get in, it's ok to apply quick fixes to current tree,
> it won't inconvinience me much.

I think we should fix and back-patch these two specific bugs.  The
openssl.c change sounds like it might be something for HEAD only.

            regards, tom lane

pgsql-bugs by date:

Previous
From: Marko Kreen
Date:
Subject: Re: pgcrypto decrypt_iv() issue
Next
From: Stefan Kaltenbrunner
Date:
Subject: Re: pgcrypto decrypt_iv() issue