Postgres Pro
Downloads
Home   >   mailing lists

pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto - Mailing list pgsql-committers

From tgl@postgresql.org (Tom Lane)
Subject pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Date
Msg-id 20060103234644.B7ED69DCA0C@postgresql.org
Whole thread Raw
List pgsql-committers
Tree view 
Log Message:
-----------
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Tags:
----
REL8_0_STABLE

Modified Files:
--------------
    pgsql/contrib/pgcrypto:
        crypt-gensalt.c (r1.4 -> r1.4.12.1)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgcrypto/crypt-gensalt.c.diff?r1=1.4&r2=1.4.12.1)

pgsql-committers by date:

Previous
From: tgl@postgresql.org (Tom Lane)
Date:
Subject: pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Next
From: tgl@postgresql.org (Tom Lane)
Date:
Subject: pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto