There is a signedness bug in Openwall gen_salt code that pgcrypto uses.

Tom Lane <tgl@sss.pgh.pa.us>

Commit: 8dc7c8cf1dc38a96cff8cf9c2c5e90f678e67420
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2006-01-03T23:46:51Z
Releases: 7.4.11
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Files

PathChange+/−
contrib/pgcrypto/crypt-gensalt.c modified +9 −9