chkpass Major Issue - compares 'contains' and not 'equal'

From: Eyedia Tech <eyedia(at)debjyoti(dot)com>
To: pgsql-bugs(at)postgresql(dot)org, darcy(at)druid(dot)net
Subject: chkpass Major Issue - compares 'contains' and not 'equal'
Date: 2018-06-07 12:41:44
Message-ID: CAHcjpqfBK=YZZjJPLfS=E8C1ZK_RJyqyZW=8uxn4D1-XtmSS5A@mail.gmail.com
Views: Raw Message | Whole Thread | Download mbox | Resend email
Thread:
Lists: pgsql-bugs

To replicate use this:

create table "user" (uname text, password chkpass);
insert into "user" values ('user1', 'password')
select * from "user" where uname = 'user1' and password = 'password1'

This is a major issue.

Thanks,
Debjyoti Das

Responses

Browse pgsql-bugs by date

  From Date Subject
Next Message Dmitry Dolgov 2018-06-07 13:53:20 Re: BUG #15212: Default values in partition tables don't work as expected and allow NOT NULL violation
Previous Message Sergei Kornilov 2018-06-07 09:12:06 Re: BUG #15231: After Upgrade from 9.3.23 to 9.6.9 getting ERROR: found xmin 598 from before relfrozenxid 68569164