There is a signedness bug in Openwall gen_salt code that pgcrypto uses.

Tom Lane <tgl@sss.pgh.pa.us>

Commit: 507e07e27704dde07bf246de766b424921de1a1b
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2006-01-03T23:46:24Z
Releases: 8.2.0
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Files

PathChange+/−
contrib/pgcrypto/crypt-gensalt.c modified +9 −9