Random number generation security problem
| From: | Christian Weiske | Date: | Mon, 18 Aug 2008 06:30:58 +0000 |
| Subject: | Random number generation security problem | ||
| Groups: | php.pear.dev | ||
| Request: | Send a blank email to pear-dev+get-50555@lists.php.net to get a copy of this message | ||
See
http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
Quote:
> I just grepped through PEAR. 11 times srand() dangerously used and 4
> times mt_srand() dangerously used. So if srand() would become an
> alias of mt_srand() the situation is obviously worse than before.
If someone has time, please check which packages this are and how we can fix this.
--
Regards/Mit freundlichen Grüßen
Christian Weiske