Horton

Thread

Commits

  1. Doc: fix release-note typo.

  1. Error in 18.4 release notes

    The Post Office <noreply@postgresql.org> — 2026-05-15T09:15:36Z

    The following documentation comment has been logged on the website:

Page: https://www.postgresql.org/docs/18/release-18-4.html
Description:

The 18.4 release notes say this: "Use timing-safe string comparisons in
authentication code (Michael Paquier) Use timingsafe_bcmp() instead of
memcpy() or strcmp() when checking passwords, ..."

I think that should be memcmp() instead of memcpy().

  2. Re: Error in 18.4 release notes

    Tom Lane <tgl@sss.pgh.pa.us> — 2026-05-15T22:13:27Z

    PG Doc comments form <noreply@postgresql.org> writes:
> The 18.4 release notes say this: "Use timing-safe string comparisons in
> authentication code (Michael Paquier) Use timingsafe_bcmp() instead of
> memcpy() or strcmp() when checking passwords, ..."

> I think that should be memcmp() instead of memcpy().

Sigh, you're right --- that's my thinko.  Will fix in git for posterity's
sake, though the notes are already out and probably no-one will care
anymore by the time of the next release.

			regards, tom lane