[pgpool-committers: 3475] pgpool: Do not use random() while	generating MD5 salt.
    Tatsuo Ishii 
    ishii at postgresql.org
       
    Fri Sep  9 12:01:48 JST 2016
    
    
  
Do not use random() while generating MD5 salt.
random() should not be used in security related applications.  To
replace random(), import PostmasterRandom() from PostgreSQL.  Also
store current time at the start up of Pgpool-II main process for later
use.
Per Coverity CID 1362583.
Branch
------
V3_4_STABLE
Details
-------
http://git.postgresql.org/gitweb?p=pgpool2.git;a=commitdiff;h=85c813c771eb523093cac4badd8b5e4b8937e635
Modified Files
--------------
src/auth/pool_auth.c    | 48 ++++++++++++++++++++++++++++++++++++++++++++----
src/main/pgpool_main.c  | 10 +++++++---
src/main/pool_globals.c |  1 +
3 files changed, 52 insertions(+), 7 deletions(-)
    
    
More information about the pgpool-committers
mailing list