Noah Misch 1d812c8b05 pgcrypto: Detect and report too-short crypt() salts. ...

Certain short salts crashed the backend or disclosed a few bytes of
backend memory.  For existing salt-induced error conditions, emit a
message saying as much.  Back-patch to 9.0 (all supported versions).

Josh Kupershmidt

Security: CVE-2015-5288

2015-10-05 10:06:29 -04:00

658 B

Raw Blame History

View Raw