upstream/postgresql
1
0
Fork 0
mirror of https://github.com/postgres/postgres.git synced 2026-05-20 17:31:54 -04:00
Code Issues Projects Releases Packages Wiki Activity Actions

Doc: fix release-note typo.

Browse source 
This mention of memcpy() should of course have said memcmp().

Reported-by: chris@chrullrich.net
Author: Tom Lane <tgl@sss.pgh.pa.us>
Discussion: https://postgr.es/m/177883653690.764749.14038057906859461991@wrigleys.postgresql.org
Backpatch-through: 14
This commit is contained in:
Tom Lane 2026-05-15 18:32:33 -04:00
parent 4503c97716
commit 2a975b991e
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
doc/src/sgml/release-15.sgml
View file

@ -293,7 +293,7 @@ Branch: REL_14_STABLE [b282280e9] 2026-05-11 05:13:51 -0700
<para>
Use <function>timingsafe_bcmp()</function> instead
of <function>memcpy()</function> or <function>strcmp()</function>
of <function>memcmp()</function> or <function>strcmp()</function>
when checking passwords, hashes, etc. It is not known whether the
data dependency of those functions is usefully exploitable in any of
these places, but in the interests of safety, replace them.