]> dgit.raspbian.org Git - dovecot.git/commit
[PATCH 04/12] lib: Key str_hash/strcase_hash with a random seed to prevent HashDoS
authorTimo Sirainen <timo.sirainen@open-xchange.com>
Mon, 13 Apr 2026 10:38:50 +0000 (12:38 +0200)
committerNoah Meyerhans <noahm@debian.org>
Wed, 16 Sep 2026 19:06:35 +0000 (15:06 -0400)
commitfe785bf32e7cb61c7a9944f6eac9c55e54ec2f20
tree1a042991b5317f6049b7c75f60fa3aba84005611
parentb22524366011874a7e2171c232d1a407f189c74e
[PATCH 04/12] lib: Key str_hash/strcase_hash with a random seed to prevent HashDoS

hash_init() fills a process-wide uint64_t hash_iv via random_fill()
at lib_init() time (after random_init()). str_hash() and strcase_hash()
pass hash_iv as the xxh64 seed so an attacker cannot predict bucket
placement and manufacture collision chains.

Gbp-Pq: Name 0004-lib-Key-str_hash-strcase_hash-with-a-random-seed-to-.patch
src/lib/hash.c
src/lib/hash.h
src/lib/lib.c