Horton

Re: Error in 18.4 release notes

Tom Lane <tgl@sss.pgh.pa.us>

View thread View on postgr.es
From: Tom Lane <tgl@sss.pgh.pa.us>
To: chris@chrullrich.net
Cc: pgsql-docs@lists.postgresql.org
Date: 2026-05-15T22:13:27Z
Lists: pgsql-docs 
PG Doc comments form <noreply@postgresql.org> writes:
> The 18.4 release notes say this: "Use timing-safe string comparisons in
> authentication code (Michael Paquier) Use timingsafe_bcmp() instead of
> memcpy() or strcmp() when checking passwords, ..."

> I think that should be memcmp() instead of memcpy().

Sigh, you're right --- that's my thinko.  Will fix in git for posterity's
sake, though the notes are already out and probably no-one will care
anymore by the time of the next release.

			regards, tom lane

Commits

  1. Doc: fix release-note typo.