pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto

From: tgl(at)postgresql(dot)org (Tom Lane)
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Date: 2006-01-03 23:46:24
Message-ID: 20060103234624.8033C9DCA0B@postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Log Message:
-----------
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Modified Files:
--------------
pgsql/contrib/pgcrypto:
crypt-gensalt.c (r1.6 -> r1.7)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgcrypto/crypt-gensalt.c.diff?r1=1.6&r2=1.7)

Browse pgsql-committers by date

  From Date Subject
Next Message Joe Conway 2006-01-03 23:46:32 pgsql: When the remote query result has a different number of columns
Previous Message Joe Conway 2006-01-03 23:45:52 pgsql: When the remote query result has a different number of columns