Обсуждение: pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto

Поиск
Список
Период
Сортировка

pgsql: There is a signedness bug in Openwall gen_salt code that pgcrypto

От
tgl@postgresql.org (Tom Lane)
Дата:
Log Message:
-----------
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Tags:
----
REL7_4_STABLE

Modified Files:
--------------
    pgsql/contrib/pgcrypto:
        crypt-gensalt.c (r1.4 -> r1.4.8.1)
        (http://developer.postgresql.org/cvsweb.cgi/pgsql/contrib/pgcrypto/crypt-gensalt.c.diff?r1=1.4&r2=1.4.8.1)