There is a signedness bug in Openwall gen_salt code that pgcrypto uses.

Tom Lane <tgl@sss.pgh.pa.us>

Commit: a74dc1241689e2e8db86ebd93f5732ef0a927684
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: 2006-01-03T23:46:56Z
Releases: 7.3.13
There is a signedness bug in Openwall gen_salt code that pgcrypto uses.
This makes the salt space for md5 and xdes algorithms a lot smaller than
it should be.

Marko Kreen

Files

PathChange+/−
contrib/pgcrypto/crypt-gensalt.c modified +9 −9