Commitaf41101

committed

Prevent failed passwords from being echoed to server logs, for security.

1 parent16d6615 commitaf41101Copy full SHA for af41101

File tree

-2

lines changed

-2

lines changed

Lines changed: 4 additions & 2 deletions

Original file line number	Diff line number	Diff line change
`@@ -8,7 +8,7 @@`
`8`	`8`	`*`
`9`	`9`	`*`
`10`	`10`	`* IDENTIFICATION`
`11`		`- * $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.78 2002/03/0506:52:05 momjian Exp $`
	`11`	`+ * $Header: /cvsroot/pgsql/src/backend/libpq/auth.c,v 1.79 2002/03/0507:57:45 momjian Exp $`
`12`	`12`	`*`
`13`	`13`	`*-------------------------------------------------------------------------`
`14`	`14`	`*/`
`@@ -663,7 +663,9 @@ pam_passwd_conv_proc(int num_msg, const struct pam_message ** msg, struct pam_re`
`663`	`663`
`664`	`664`	`initStringInfo(&buf);`
`665`	`665`	`pq_getstr(&buf);`
`666`		`-elog(DEBUG5,"received PAM packet with len=%d, pw=%s",len,buf.data);`
	`666`	`+`
	`667`	`+/* Do not echo failed password to logs, for security. */`
	`668`	`+elog(DEBUG5,"received PAM packet");`
`667`	`669`
`668`	`670`	`if (strlen(buf.data)==0)`
`669`	`671`	`{`

Comments

(0)