search

michelp / pgsodium

Modern cryptography for PostgreSQL using libsodium.
Other
555 stars 32 forks source link

Made local copy of state datum in crypto_sign_final_create. #8

Closed marcmunro closed 4 years ago

marcmunro commented 4 years ago

We need to copy the datum for state before it is used by crypto_sign_final_create(). Failing to do so leaves a datum that is available to sql which does not have its original value. This is bad.

I haven't added a test for this, but have informally tested it in my own application and it appears to work - which it didn't previously.