rdelaage
/
postgresql
mirror of https://git.postgresql.org/git/postgresql.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
postgresql/contrib/pgcrypto/sql
History
Michael Paquier a3ab7a707d Fix corner case with 16kB-long decompression in pgcrypto, take 2 
A compressed stream may end with an empty packet.  In this case
decompression finishes before reading the empty packet and the
remaining stream packet causes a failure in reading the following
data.  This commit makes sure to consume such extra data, avoiding a
failure when decompression the data.  This corner case was reproducible
easily with a data length of 16kB, and existed since e94dd6a.  A cheap
regression test is added to cover this case based on a random,
incompressible string.

The first attempt of this patch has allowed to find an older failure
within the compression logic of pgcrypto, fixed by b9b6105.  This
involved SLES 15 with z390 where a custom flavor of libz gets used.
Bonus thanks to Mark Wong for providing access to the specific
environment.

Reported-by: Frank Gagnepain
Author: Kyotaro Horiguchi, Michael Paquier
Reviewed-by: Tom Lane
Discussion: https://postgr.es/m/16476-692ef7b84e5fb893@postgresql.org
Backpatch-through: 9.5
 		2020-07-27 15:58:32 +09:00
..
3des.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
blowfish.sql Remove useless whitespace at end of lines 2010-11-23 22:34:55 +02:00
cast5.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
crypt-blowfish.sql pgcrypto: Detect and report too-short crypt() salts. 2015-10-05 10:06:29 -04:00
crypt-des.sql pgcrypto: Detect and report too-short crypt() salts. 2015-10-05 10:06:29 -04:00
crypt-md5.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
crypt-xdes.sql pgcrypto: Detect and report too-short crypt() salts. 2015-10-05 10:06:29 -04:00
des.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
hmac-md5.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
hmac-sha1.sql Fix typos in SQL scripts of pgcrypto 2019-05-28 06:33:30 -04:00
init.sql Convert contrib modules to use the extension facility. 2011-02-13 22:54:49 -05:00
md5.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
pgp-armor.sql Add functions for dealing with PGP armor header lines to pgcrypto. 2014-10-01 16:03:39 +03:00
pgp-compression.sql Fix corner case with 16kB-long decompression in pgcrypto, take 2 2020-07-27 15:58:32 +09:00
pgp-decrypt.sql Fix typos in SQL scripts of pgcrypto 2019-05-28 06:33:30 -04:00
pgp-encrypt.sql pgcrypto: support changing S2K iteration count 2016-03-09 14:31:07 -03:00
pgp-info.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
pgp-pubkey-decrypt.sql Fix buffer overrun after incomplete read in pullf_read_max(). 2015-02-02 10:00:45 -05:00
pgp-pubkey-encrypt.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
pgp-zlib-DISABLED.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
rijndael.sql pgcrypto's encrypt() supports AES-128, AES-192, and AES-256 2018-01-31 16:33:11 -05:00
sha1.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00
sha2.sql Remove extra newlines at end and beginning of files, add missing newlines 2010-08-19 05:57:36 +00:00