postgres.git / summary / log / commit / refs
commit 2adf78dbe9a2e4a32ceb5383e240c06ef6728776
Author: Tom Lane <tgl@sss.pgh.pa.us>
Date: Fri May 15 22:32:33 2026 +0000
First released in: 14.24, 15.19, 16.15, 17.11, 18.6
Doc: fix release-note typo.
This mention of memcpy() should of course have said memcmp().
Reported-by: chris@chrullrich.net
Author: Tom Lane <tgl@sss.pgh.pa.us>
Discussion: https://postgr.es/m/177883653690.764749.14038057906859461991@wrigleys.postgresql.org
Backpatch-through: 14
doc/src/sgml/release-16.sgml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/doc/src/sgml/release-16.sgml b/doc/src/sgml/release-16.sgml
index 143d1b109dc..d99ca0e6dff 100644
--- a/doc/src/sgml/release-16.sgml
+++ b/doc/src/sgml/release-16.sgml
@@ -320,7 +320,7 @@ Branch: REL_14_STABLE [b282280e9] 2026-05-11 05:13:51 -0700
<para>
Use <function>timingsafe_bcmp()</function> instead
- of <function>memcpy()</function> or <function>strcmp()</function>
+ of <function>memcmp()</function> or <function>strcmp()</function>
when checking passwords, hashes, etc. It is not known whether the
data dependency of those functions is usefully exploitable in any of
these places, but in the interests of safety, replace them.
[parent: f71f72e89abf]