| From: | Francisco Olarte <folarte(at)peoplecall(dot)com> |
|---|---|
| To: | Михаил Манерко <asper(at)tagan(dot)ru> |
| Cc: | pgsql-bugs(at)postgresql(dot)org |
| Subject: | Re: crypt function crash on postgresql 9.3.20 and 10 |
| Date: | 2018-02-02 14:38:52 |
| Message-ID: | CA+bJJby0xv3vNAGKEV2VdBm9c2V899u+1tbdO+MUba_GrPLOyw@mail.gmail.com |
| Views: | Whole Thread | Raw Message | Download mbox | Resend email |
| Thread: | |
| Lists: | pgsql-bugs |
Seems more like pilot error than a bug....
On Fri, Feb 2, 2018 at 2:11 PM, Михаил Манерко <asper(at)tagan(dot)ru> wrote:
> If you send an asterisk in the crypt function, the function crashes.
> example
>
> i=# select crypt('123','*');
> ОШИБКА: invalid salt
> i=#
Id does not crash, it just rejects your salt as invalid, probably
because it is ( does not look right to me, but I'm not in the mood for
fully checking that ).
TFM states 'Calculates a crypt(3)-style hash of password. When storing
a new password, you need to use gen_salt() to generate a new salt
value. To check a password, pass the stored hash value as salt, and
test whether the result matches the stored value.'
Are you doing that ?
Francisco Olarte.
| From | Date | Subject | |
|---|---|---|---|
| Next Message | Mike Porter | 2018-02-02 14:44:52 | Re: crypt function crash on postgresql 9.3.20 and 10 |
| Previous Message | Михаил Манерко | 2018-02-02 13:11:04 | crypt function crash on postgresql 9.3.20 and 10 |