Re: Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166

Forums » Tech and Talk » OS and Software » All Things Unix » Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166


Share Topic:	RSS topic:	toggle: flat / full normal / watch	Posting:	Post a:	Post a:

Links: ·Forum FAQ ·Attitude Adjustment ·Linux docs ·DistroWatch ·OPLM ·FreeBSD Handbook

Gentoo revokes developer rights of 3, Cabal suspected. »
« Which is more stable and reliable UNIX OS?

Cabal
Premium
join:2007-01-21
Boston, MA

Re: Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166

quote:
Usually it is bad to have any kind of dependency on uninitialised memory, but OpenSSL happens to include a rare case when its OK, or even a good idea: its randomness pool. Adding uninitialised memory to it can do no harm and might do some good, which is why we do it.

I know people hate to comment their code, but maybe intentionally using uninitialized memory would be a good opportunity for that sort of thing.

--
Interested in open source engine management for your Subaru?

permalink · 2008-05-13 11:12:03 · Print ·

Steve I'm a PC, so shut up Consultant join:2001-03-10 Yorba Linda, CA	Re: Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166 said by Cabal : I know people hate to comment their code, but maybe intentionally using uninitialized memory would be a good opportunity for that sort of thing. Funny you should mention that
	permalink · 2008-05-13 11:37:16 · Print ·

your comment..

Forums » Tech and Talk » OS and Software » All Things Unix	Gentoo revokes developer rights of 3, Cabal suspected. » « Which is more stable and reliable UNIX OS?


Thursday, 10-Dec 10:35:48	Terms of Use \| Privacy Policy \| Hosting by www.nac.net - DSL,Hosting & Co-lo \| feedback \| contact over 10 years online! © 1999-2009 dslreports.com. page compression OFF