projects / pgpool2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 85d93c4) | patch
Do not use random() while generating MD5 salt.
authorTatsuo Ishii <ishii@postgresql.org>
Fri, 9 Sep 2016 02:24:54 +0000 (11:24 +0900)
committerTatsuo Ishii <ishii@postgresql.org>
Fri, 9 Sep 2016 02:35:38 +0000 (11:35 +0900)
commit85c813c771eb523093cac4badd8b5e4b8937e635
tree6b4450cc57e173631e352c114cef87754e3e82e8tree
parent85d93c48e51057134895a29ae026d1bf2e053a37commit | diff
Do not use random() while generating MD5 salt.

random() should not be used in security related applications.  To
replace random(), import PostmasterRandom() from PostgreSQL.  Also
store current time at the start up of Pgpool-II main process for later
use.

Per Coverity CID 1362583.
src/auth/pool_auth.c diff | blob | blame | history
src/main/pgpool_main.c diff | blob | blame | history
src/main/pool_globals.c diff | blob | blame | history
Clustering tool for PostgreSQL