projects / pgpool2.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: 25a410b) | patch
Do not use random() while generating MD5 salt.
authorTatsuo Ishii <ishii@postgresql.org>
Fri, 9 Sep 2016 02:53:27 +0000 (11:53 +0900)
committerTatsuo Ishii <ishii@postgresql.org>
Fri, 9 Sep 2016 02:54:39 +0000 (11:54 +0900)
commitdf44622068eca90f976564c45bb7b5537b4470a8
treeaa05019bf475a519c87aa36ba3a40eaa8066e80ctree
parent25a410b9fd3e5691b64e0959b747472dbc25e4f7commit | diff
Do not use random() while generating MD5 salt.

random() should not be used in security related applications.  To
replace random(), import PostmasterRandom() from PostgreSQL.  Also
store current time at the start up of Pgpool-II main process for later
use.

Per Coverity CID 1362583.
main.c diff | blob | blame | history
pool_auth.c diff | blob | blame | history
Clustering tool for PostgreSQL