Marko Kreen wrote:
Some builds (depends on crypto engine support?) of OpenSSL
0.9.7x have EVP_DigestFinal function which which clears all of
EVP_MD_CTX.  This makes pgcrypto crash in functions which
re-use one digest context several times: hmac() and crypt()
with md5 algorithm.

Following patch fixes it by carring the digest info around
EVP_DigestFinal and re-initializing cipher.

Applied to HEAD, REL8_0_STABLE and REL7_4_STABLE. Thanks for the patch.

Please apply this also to stable branches (8.0 / 7.4).

Should it be backpatched to 7.3 and 7.2 as well?


---------------------------(end of broadcast)---------------------------
TIP 6: Have you searched our list archives?

Reply via email to