Go to:
Gentoo Home
Documentation
Forums
Lists
Bugs
Planet
Store
Wiki
Get Gentoo!
Gentoo's Bugzilla – Attachment 50933 Details for
Bug 81521
dev-perl/Net-SSLeay Insecure entropy source in Net::SSLeay (CAN-2005-0106) (Vendor-Sec)
Home
|
New
–
[Ex]
|
Browse
|
Search
|
Privacy Policy
|
[?]
|
Reports
|
Requests
|
Help
|
New Account
|
Log In
[x]
|
Forgot Password
Login:
[x]
[patch]
ssleay.diff
ssleay.diff (text/plain), 1.13 KB, created by
Sune Kloppenborg Jeppesen (RETIRED)
on 2005-02-10 11:07:45 UTC
(
hide
)
Description:
ssleay.diff
Filename:
MIME Type:
Creator:
Sune Kloppenborg Jeppesen (RETIRED)
Created:
2005-02-10 11:07:45 UTC
Size:
1.13 KB
patch
obsolete
>--- SSLeay.pm.orig 2005-01-26 23:41:12.000000000 +0100 >+++ SSLeay.pm 2005-01-26 23:44:58.000000000 +0100 >@@ -43,6 +43,7 @@ > # Kim Minh Kaplan <kmkaplan@selfoffice._com> > # 17.8.2003, added http support :-) --Sampo > # 17.8.2003, started 1.25 dev --Sampo >+# 26.1.2005, do not use /tmp if EGD_PATH is not defined > # > # The distribution and use of this module are subject to the conditions > # listed in LICENSE file at the root of OpenSSL-0.9.7b >@@ -1853,8 +1854,8 @@ > my ($rn_seed_file, $seed, $egd_path) = @_; > my $rnsf = defined($rn_seed_file) && -r $rn_seed_file; > >+ $egd_path = ''; > $egd_path = $ENV{'EGD_PATH'} if $ENV{'EGD_PATH'}; >- $egd_path = '/tmp/entropy' unless $egd_path; > > RAND_seed(rand() + $$); # Stir it with time and pid > >@@ -1865,7 +1866,7 @@ > RAND_load_file($rn_seed_file, -s _) if $rnsf; > RAND_seed($seed) if $seed; > RAND_seed($ENV{RND_SEED}) if $ENV{RND_SEED}; >- RAND_egd($egd_path) if -S $egd_path; >+ RAND_egd($egd_path) if -e $egd_path && -S $egd_path; > RAND_load_file($Net::SSLeay::random_device, $Net::SSLeay::how_random/8) > if -r $Net::SSLeay::random_device; > }
You cannot view the attachment while viewing its details because your browser does not support IFRAMEs.
View the attachment on a separate page
.
View Attachment As Diff
View Attachment As Raw
Actions:
View
|
Diff
Attachments on
bug 81521
: 50933