Postgres Pro
Downloads
Home   >   mailing lists

pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto - Mailing list pgsql-committers

From tgl@postgresql.org (Tom Lane)
Subject pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Date
Msg-id 20060103234624.8033C9DCA0B@postgresql.org
Whole thread Raw
List pgsql-committers
Tree view 
Log Message:
-----------
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Modified Files:
--------------
    pgsql/contrib/pgcrypto:
        crypt-gensalt.c (r1.6 -> r1.7)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgcrypto/crypt-gensalt.c.diff?r1=1.6&r2=1.7)

pgsql-committers by date:

Previous
From: joe@postgresql.org (Joe Conway)
Date:
Subject: pgsql: When the remote query result has a different number of columns
Next
From: joe@postgresql.org (Joe Conway)
Date:
Subject: pgsql: When the remote query result has a different number of columns