Tom Lane 969ab9d4f5 Follow-up fixes for SHA-2 patch (commit 749a9e20c). ...

This changes the check for valid characters in the salt string to
only allow plain ASCII letters and digits.  The previous coding was
locale-dependent which doesn't really seem like a great idea here;
moreover it could not work correctly in multibyte encodings.

This fixes a careless pointer-use-after-pfree, too.

Reported-by: Tom Lane <tgl@sss.pgh.pa.us>
Reported-by: Andres Freund <andres@anarazel.de>
Author: Bernd Helmle <mailings@oopsware.de>
Discussion: https://postgr.es/m/6fab35422df6b6b9727fdcc243c5fa1c667dd3b5.camel@oopsware.de

2025-04-07 14:14:28 -04:00

..

expected

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

sql

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

.gitignore

Support SCRAM-SHA-256 authentication (RFC 5802 and 7677).

2017-03-07 14:25:40 +02:00

crypt-blowfish.c

Remove support for HPPA (a/k/a PA-RISC) architecture.

2024-07-01 13:55:52 -04:00

crypt-des.c

Replace remaining StrNCpy() by strlcpy()

2020-08-10 23:20:37 +02:00

crypt-gensalt.c

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

crypt-md5.c

pgcrypto: Remove static storage class from variables

2025-02-06 15:13:40 +01:00

crypt-sha.c

Follow-up fixes for SHA-2 patch (commit 749a9e20c).

2025-04-07 14:14:28 -04:00

Makefile

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

mbuf.c

pgcrypto: Remove unused code

2022-09-14 21:58:30 +02:00

mbuf.h

Harmonize parameter names in contrib code.

2022-09-22 13:59:20 -07:00

meson.build

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

openssl.c

pgcrypto: Add support for CFB mode in AES encryption

2025-02-14 21:18:37 +01:00

pgcrypto--1.0--1.1.sql

Add gen_random_uuid() to contrib/pgcrypto.

2014-01-17 16:52:06 -05:00

pgcrypto--1.1--1.2.sql

Add functions for dealing with PGP armor header lines to pgcrypto.

2014-10-01 16:03:39 +03:00

pgcrypto--1.2--1.3.sql

Update pgcrypto extension for parallel query.

2016-06-09 17:18:14 -04:00

pgcrypto--1.3--1.4.sql

pgcrypto: Add function to check FIPS mode

2025-01-24 14:18:40 +01:00

pgcrypto--1.3.sql

Minor fixes in contrib installation scripts.

2016-06-14 10:47:06 -04:00

pgcrypto.c

Use PG_MODULE_MAGIC_EXT in our installable shared libraries.

2025-03-26 11:11:02 -04:00

pgcrypto.control

pgcrypto: Add function to check FIPS mode

2025-01-24 14:18:40 +01:00

pgcrypto.h

Remove unnecessary prototypes

2016-09-30 14:04:16 -04:00

pgp-armor.c

Add some const qualifiers

2023-09-26 11:28:57 +01:00

pgp-cfb.c

pgcrypto: Remove internal padding implementation

2022-03-22 08:58:44 +01:00

pgp-compress.c

Improve const use in zlib-using code

2023-08-07 09:34:38 +02:00

pgp-decrypt.c

pgcrypto: Fix check for buffer size

2024-01-30 11:15:46 +01:00

pgp-encrypt.c

Remove custom memory allocation layer in pgcrypto

2020-09-25 10:25:55 +09:00

pgp-info.c

Dial back -Wimplicit-fallthrough to level 3

2020-05-13 15:31:14 -04:00

pgp-mpi-openssl.c

Make the order of the header file includes consistent in contrib modules.

2019-10-24 08:05:34 +05:30

pgp-mpi.c

Remove custom memory allocation layer in pgcrypto

2020-09-25 10:25:55 +09:00

pgp-pgsql.c

pgcrypto: Fix incorrect argument vs PG_GETARG*() mappings

2024-02-14 08:59:05 +09:00

pgp-pubdec.c

Make the order of the header file includes consistent in contrib modules.

2019-10-24 08:05:34 +05:30

pgp-pubenc.c

Remove custom memory allocation layer in pgcrypto

2020-09-25 10:25:55 +09:00

pgp-pubkey.c

Remove custom memory allocation layer in pgcrypto

2020-09-25 10:25:55 +09:00

pgp-s2k.c

Make the order of the header file includes consistent in contrib modules.

2019-10-24 08:05:34 +05:30

pgp.c

pgcrypto: Remove unused code

2022-09-14 21:58:30 +02:00

pgp.h

Add trailing commas to enum definitions

2023-10-26 09:20:54 +02:00

px-crypt.c

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

px-crypt.h

Add modern SHA-2 based password hashes to pgcrypto.

2025-04-05 19:17:13 +02:00

px-hmac.c

Remove custom memory allocation layer in pgcrypto

2020-09-25 10:25:55 +09:00

px.c

Remove redundant memset call following palloc0

2022-10-13 23:18:00 +02:00

px.h

pg_noreturn to replace pg_attribute_noreturn()

2025-03-13 12:37:26 +01:00