• Noah Misch's avatar
    pgcrypto: Detect and report too-short crypt() salts. · 1d812c8b
    Noah Misch authored
    Certain short salts crashed the backend or disclosed a few bytes of
    backend memory.  For existing salt-induced error conditions, emit a
    message saying as much.  Back-patch to 9.0 (all supported versions).
    
    Josh Kupershmidt
    
    Security: CVE-2015-5288
    1d812c8b
crypt-des.sql 471 Bytes