mirror of
https://git.postgresql.org/git/postgresql.git
synced 2024-09-30 10:01:14 +02:00
5d726c72cd
The code copying the PGP block into the temp buffer failed to account for the extra 2 bytes in the buffer which are needed for the prefix. If the block was oversized, subsequent checks of the prefix would have exceeded the buffer size. Since the block sizes are hardcoded in the list of supported ciphers it can be verified that there is no live bug here. Backpatch all the way for consistency though, as this bug is old. Author: Mikhail Gribkov <youzhick@gmail.com> Discussion: https://postgr.es/m/CAMEv5_uWvcMCMdRFDsJLz2Q8g16HEa9xWyfrkr+FYMMFJhawOw@mail.gmail.com Backpatch-through: v12 |
||
|---|---|---|
| .. | ||
| expected | ||
| sql | ||
| .gitignore | ||
| crypt-blowfish.c | ||
| crypt-des.c | ||
| crypt-gensalt.c | ||
| crypt-md5.c | ||
| Makefile | ||
| mbuf.c | ||
| mbuf.h | ||
| meson.build | ||
| openssl.c | ||
| pgcrypto--1.0--1.1.sql | ||
| pgcrypto--1.1--1.2.sql | ||
| pgcrypto--1.2--1.3.sql | ||
| pgcrypto--1.3.sql | ||
| pgcrypto.c | ||
| pgcrypto.control | ||
| pgcrypto.h | ||
| pgp-armor.c | ||
| pgp-cfb.c | ||
| pgp-compress.c | ||
| pgp-decrypt.c | ||
| pgp-encrypt.c | ||
| pgp-info.c | ||
| pgp-mpi-openssl.c | ||
| pgp-mpi.c | ||
| pgp-pgsql.c | ||
| pgp-pubdec.c | ||
| pgp-pubenc.c | ||
| pgp-pubkey.c | ||
| pgp-s2k.c | ||
| pgp.c | ||
| pgp.h | ||
| px-crypt.c | ||
| px-crypt.h | ||
| px-hmac.c | ||
| px.c | ||
| px.h | ||