|From:||Daniel Gustafsson <daniel(at)yesql(dot)se>|
|To:||Michael Paquier <michael(at)paquier(dot)xyz>|
|Cc:||Heikki Linnakangas <hlinnaka(at)iki(dot)fi>, Tom Lane <tgl(at)sss(dot)pgh(dot)pa(dot)us>, Postgres hackers <pgsql-hackers(at)lists(dot)postgresql(dot)org>|
|Subject:||Re: scram-sha-256 broken with FIPS and OpenSSL 1.0.2|
|Views:||Raw Message | Whole Thread | Download mbox | Resend email|
> On 3 Dec 2020, at 02:47, Michael Paquier <michael(at)paquier(dot)xyz> wrote:
> On Wed, Dec 02, 2020 at 12:03:49PM +0900, Michael Paquier wrote:
>> Thanks. 0001 has been applied and the buildfarm does not complain, so
>> it looks like we are good (I'll take care of any issues, like the one
>> Fujii-san has just reported). Attached are new patches for 0002, the
>> EVP switch. One thing I noticed is that we need to free the backup
>> manifest a bit earlier once we begin to use resource owner in
>> basebackup.c as there is a specific step that may do a double-free.
>> This would not happen when not using OpenSSL or on HEAD. It would be
>> easy to separate the resowner and cryptohash portions of the patch
>> here, but both are tightly linked, so I'd prefer to keep them
> Attached is a rebased version to take care of the conflicts introduced
> by 91624c2f.
This version looks good to me, and builds/tests without any issues. While I
didn't try to adapt the libnss patch to the resowner machinery, I don't see any
reasons off the cuff why it wouldn't work with the scaffolding provided here.
My only question is:
+ elog(ERROR, "out of memory");
Shouldn't that be an ereport using ERRCODE_OUT_OF_MEMORY?
|Next Message||Heikki Linnakangas||2020-12-03 22:16:51||Re: Corner-case bug in pg_rewind|
|Previous Message||Justin Pryzby||2020-12-03 21:58:09||Re: please update ps display for recovery checkpoint|