Noah Misch 4d6752277e pgcrypto: Detect and report too-short crypt() salts. ...

Certain short salts crashed the backend or disclosed a few bytes of
backend memory.  For existing salt-induced error conditions, emit a
message saying as much.  Back-patch to 9.0 (all supported versions).

Josh Kupershmidt

Security: CVE-2015-5288

2015-10-05 10:06:33 -04:00

..

expected

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:33 -04:00

sql

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:33 -04:00

.gitignore

Support "make check" in contrib

2011-04-25 22:27:11 +03:00

blf.c

Remove cvs keywords from all files.

2010-09-20 22:08:53 +02:00

blf.h

Remove cvs keywords from all files.

2010-09-20 22:08:53 +02:00

crypt-blowfish.c

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:33 -04:00

crypt-des.c

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:33 -04:00

crypt-gensalt.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

crypt-md5.c

pgcrypto: fix memset() calls that might be optimized away

2014-04-17 12:37:53 -04:00

fortuna.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

fortuna.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

imath.c

Cherry-pick security-relevant fixes from upstream imath library.

2015-02-02 10:00:45 -05:00

imath.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

internal-sha2.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

internal.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

Makefile

Add functions for dealing with PGP armor header lines to pgcrypto.

2014-10-01 16:03:39 +03:00

mbuf.c

pgcrypto: Report errant decryption as "Wrong key or corrupt data".

2015-05-18 10:02:31 -04:00

mbuf.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

md5.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

md5.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

openssl.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgcrypto--1.0--1.1.sql

Add gen_random_uuid() to contrib/pgcrypto.

2014-01-17 16:52:06 -05:00

pgcrypto--1.1--1.2.sql

Add functions for dealing with PGP armor header lines to pgcrypto.

2014-10-01 16:03:39 +03:00

pgcrypto--1.2.sql

Fix file-identification comment in contrib/pgcrypto/pgcrypto--1.2.sql.

2014-10-20 10:53:57 -04:00

pgcrypto--unpackaged--1.0.sql

Fix typos in some error messages thrown by extension scripts when fed to psql.

2014-08-25 18:30:37 +02:00

pgcrypto.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgcrypto.control

Add functions for dealing with PGP armor header lines to pgcrypto.

2014-10-01 16:03:39 +03:00

pgcrypto.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-armor.c

pgindent run for 9.5

2015-05-23 21:35:49 -04:00

pgp-cfb.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-compress.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-decrypt.c

pgcrypto: Report errant decryption as "Wrong key or corrupt data".

2015-05-18 10:02:31 -04:00

pgp-encrypt.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-info.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-mpi-internal.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-mpi-openssl.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-mpi.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-pgsql.c

pgindent run for 9.5

2015-05-23 21:35:49 -04:00

pgp-pubdec.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-pubenc.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-pubkey.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp-s2k.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

pgp.h

pgindent run for 9.5

2015-05-23 21:35:49 -04:00

px-crypt.c

pgcrypto: Detect and report too-short crypt() salts.

2015-10-05 10:06:33 -04:00

px-crypt.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

px-hmac.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

px.c

pgcrypto: Report errant decryption as "Wrong key or corrupt data".

2015-05-18 10:02:31 -04:00

px.h

pgcrypto: Report errant decryption as "Wrong key or corrupt data".

2015-05-18 10:02:31 -04:00

random.c

Prevent Valgrind Memcheck errors around px_acquire_system_randomness().

2015-02-02 10:00:45 -05:00

rijndael.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

rijndael.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

rijndael.tbl

Remove useless whitespace at end of lines

2010-11-23 22:34:55 +02:00

sha1.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

sha1.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

sha2.c

pgindent run for 9.4

2014-05-06 12:12:18 -04:00

sha2.h

pgindent run for 9.4

2014-05-06 12:12:18 -04:00