rdelaage
/
postgresql
mirror of https://git.postgresql.org/git/postgresql.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Apply upstream fix for blowfish signed-character bug (CVE-2011-2483). 

A password containing a character with the high bit set was misprocessed
on machines where char is signed (which is most).  This could cause the
preceding one to three characters to fail to affect the hashed result,
thus weakening the password.  The result was also unportable, and failed
to match some other blowfish implementations such as OpenBSD's.

Since the fix changes the output for such passwords, upstream chose
to provide a compatibility hack: password salts beginning with $2x$
(instead of the usual $2a$ for blowfish) are intentionally processed
"wrong" to give the same hash as before.  Stored password hashes can
thus be modified if necessary to still match, though it'd be better
to change any affected passwords.

In passing, sync a couple other upstream changes that marginally improve
performance and/or tighten error checking.

Back-patch to all supported branches.  Since this issue is already
public, no reason not to commit the fix ASAP.
This commit is contained in:
Tom Lane 2011-06-21 14:41:05 -04:00
parent 66cab2b600
commit 457c2d9158
2 changed files with 17 additions and 10 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

26
contrib/pgcrypto/crypt-blowfish.c
View File

@ -5,8 +5,8 @@
* and crypt(3) interfaces added, but optimizations specific to password
* cracking removed.
*
* Written by Solar Designer <solar@openwall.com> in 1998-2001, and placed
* in the public domain.
* Written by Solar Designer <solar at openwall.com> in 1998-2002 and
* placed in the public domain.
*
* There's absolutely no warranty.
*
@ -19,9 +19,9 @@
* of your choice.
*
* This implementation is compatible with OpenBSD bcrypt.c (version 2a)
* by Niels Provos <provos@physnet.uni-hamburg.de>, and uses some of his
* ideas. The password hashing algorithm was designed by David Mazieres
* <dm@lcs.mit.edu>.
* by Niels Provos <provos at citi.umich.edu>, and uses some of his
* ideas. The password hashing algorithm was designed by David Mazieres
* <dm at lcs.mit.edu>.
*
* There's a paper on the algorithm that explains its design decisions:
*
@ -40,7 +40,7 @@
#ifdef __i386__
#define BF_ASM 0 /* 1 */
#define BF_SCALE 1
#elif defined(__alpha__)
#elif defined(__x86_64__) || defined(__alpha__) || defined(__hppa__)
#define BF_ASM 0
#define BF_SCALE 1
#else
@ -49,6 +49,7 @@
#endif
typedef unsigned int BF_word;
typedef signed int BF_word_signed;
/* Number of Blowfish rounds, this is also hardcoded into a few places */
#define BF_N 16
@ -544,7 +545,8 @@ extern void _BF_body_r(BF_ctx * ctx);
#endif
static void
BF_set_key(const char *key, BF_key expanded, BF_key initial)
BF_set_key(const char *key, BF_key expanded, BF_key initial,
int sign_extension_bug)
{
const char *ptr = key;
int i,
@ -557,7 +559,10 @@ BF_set_key(const char *key, BF_key expanded, BF_key initial)
for (j = 0; j < 4; j++)
{
tmp <<= 8;
tmp |= *ptr;
if (sign_extension_bug)
tmp |= (BF_word_signed) (signed char) *ptr;
else
tmp |= (unsigned char) *ptr;
if (!*ptr)
ptr = key;
@ -599,10 +604,11 @@ _crypt_blowfish_rn(const char *key, const char *setting,
if (setting[0] != '$' ||
setting[1] != '2' ||
setting[2] != 'a' ||
(setting[2] != 'a' && setting[2] != 'x') ||
setting[3] != '$' ||
setting[4] < '0' || setting[4] > '3' ||
setting[5] < '0' || setting[5] > '9' ||
(setting[4] == '3' && setting[5] > '1') ||
setting[6] != '$')
{
return NULL;
@ -616,7 +622,7 @@ _crypt_blowfish_rn(const char *key, const char *setting,
}
BF_swap(data.binary.salt, 4);
BF_set_key(key, data.expanded_key, data.ctx.P);
BF_set_key(key, data.expanded_key, data.ctx.P, setting[2] == 'x');
memcpy(data.ctx.S, BF_init_state.S, sizeof(data.ctx.S));

1
contrib/pgcrypto/px-crypt.c
View File

@ -79,6 +79,7 @@ struct px_crypt_algo
static const struct px_crypt_algo
px_crypt_list[] = {
{"$2a$", 4, run_crypt_bf},
{"$2x$", 4, run_crypt_bf},
{"$2$", 3, NULL}, /* N/A */
{"$1$", 3, run_crypt_md5},
{"_", 1, run_crypt_des},