From 2adf78dbe9a2e4a32ceb5383e240c06ef6728776 Mon Sep 17 00:00:00 2001 From: Tom Lane Date: Fri, 15 May 2026 18:32:33 -0400 Subject: [PATCH] Doc: fix release-note typo. This mention of memcpy() should of course have said memcmp(). Reported-by: chris@chrullrich.net Author: Tom Lane Discussion: https://postgr.es/m/177883653690.764749.14038057906859461991@wrigleys.postgresql.org Backpatch-through: 14 --- doc/src/sgml/release-16.sgml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/doc/src/sgml/release-16.sgml b/doc/src/sgml/release-16.sgml index 143d1b109dc..d99ca0e6dff 100644 --- a/doc/src/sgml/release-16.sgml +++ b/doc/src/sgml/release-16.sgml @@ -320,7 +320,7 @@ Branch: REL_14_STABLE [b282280e9] 2026-05-11 05:13:51 -0700 Use timingsafe_bcmp() instead - of memcpy() or strcmp() + of memcmp() or strcmp() when checking passwords, hashes, etc. It is not known whether the data dependency of those functions is usefully exploitable in any of these places, but in the interests of safety, replace them.