pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto

From: tgl(at)postgresql(dot)org (Tom Lane)
To: pgsql-committers(at)postgresql(dot)org
Subject: pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Date: 2006-01-03 23:46:51
Message-ID: 20060103234651.95AD29DCA22@postgresql.org
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-committers

Log Message:
-----------
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Tags:
----
REL7_4_STABLE

Modified Files:
--------------
pgsql/contrib/pgcrypto:
crypt-gensalt.c (r1.4 -> r1.4.8.1)
(http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgcrypto/crypt-gensalt.c.diff?r1=1.4&r2=1.4.8.1)

Browse pgsql-committers by date

  From Date Subject
Next Message Tom Lane 2006-01-03 23:46:56 pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto
Previous Message Tom Lane 2006-01-03 23:46:44 pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto