republican-creole
Search:  

 
theme to black backgroundlet page decide theme
HomeFind ServiceReviewsISP NewsFAQsForumsToolsDatabaseAbout 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Tech and Talk » OS and Software » All Things Unix » Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166
Search Topic:
 Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Links: ·Forum FAQ ·Attitude Adjustment ·Linux docs ·DistroWatch ·OPLM ·FreeBSD Handbook
Gentoo revokes developer rights of 3, Cabal suspected. »
« Which is more stable and reliable UNIX OS?  
AuthorAll Replies


Cabal
Premium
join:2007-01-21
Boston, MA

reply to deblin
Re: Heads Up: Debian OpenSSL RNG Vuln CVE-2008-0166

quote:
Usually it is bad to have any kind of dependency on uninitialised memory, but OpenSSL happens to include a rare case when its OK, or even a good idea: its randomness pool. Adding uninitialised memory to it can do no harm and might do some good, which is why we do it.
I know people hate to comment their code, but maybe intentionally using uninitialized memory would be a good opportunity for that sort of thing.
--
Interested in open source engine management for your Subaru?
to forum · permalink · · 2008-05-13 11:12:03 · Reply to this


Steve
I'm a PC, so shut up
Consultant
join:2001-03-10
Yorba Linda, CA
said by Cabal See Profile :

I know people hate to comment their code, but maybe intentionally using uninitialized memory would be a good opportunity for that sort of thing.
Funny you should mention that
to forum · permalink · · 2008-05-13 11:37:16 · Reply to this
Forums » Tech and Talk » OS and Software » All Things UnixGentoo revokes developer rights of 3, Cabal suspected. »
« Which is more stable and reliable UNIX OS?  

Wednesday, 02-Dec 04:53:30 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.republican-creole
page compression OFF
Most commented news this week
· [151] Comcast Releasing Promised Usage Meter
· [69] Baltimore To Ban Lazy Cable Installs
· [56] Broadband Killed The Game Console
· [55] Latest Consumer Reports Survey Not Kind To AT&T
· [52] Rogers Unveils The ISP Dream Model
· [41] Rural Carriers Quickly Embracing Fiber
· [38] ACTA: Global Three Strikes
· [35] Charter Exits Chapter 11
· [33] AT&T Top Lobbyist Cicconi Has His Feelings Hurt
· [26] Vivendi Agrees, Comcast/NBC Deal Soon
Most people now reading
· [Newsgroups] Newzleech down? [Filesharing Software]
· [WIN7] Outlook express under Windows 7? [Microsoft Help]
· Security Software Updates - 1 Dec 2009 [Security]
· Windows 7 boot manager editing questions [Microsoft Help]
· [Newsgroups] Newzleech is either down or gone for good... [Filesharing Software]
· MagicJack Hack so you can use your own adapter [MagicJack]
· What to use while demonoid is down? [Filesharing Software]
· Opening a file download dialog from a JavaScript function. [Webmasters and Developers]
· RE: LA Slow Down [AT&T West]
· ToC 4th boss - Preliminary Strategy for Twin Valkyr [World of Warcraft]