Re: Random number generation security problem
| From: | Daniel O'Connor | Date: | Tue, 07 Oct 2008 01:00:27 +0000 |
| Subject: | Re: Random number generation security problem | ||
| References: | 1 2 3 | Groups: | php.pear.dev php.pear.qa |
| Request: | Send a blank email to pear-dev+get-50826@lists.php.net to get a copy of this message | ||
On Mon, Sep 22, 2008 at 2:44 AM, Christian Weiske <cweiske@cweiske.de>wrote:
> Hi again,
>
>
> > > See
> > > }O³Þé
> > > ïõ£Xû2…cìhttp://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
> > I grepped through pear cvs and the following files seed the random
> > number generator:
> > Since php 4.2.0 we don't need to seed anymore since that's
> > automatically done. Removing mt_srand() and srand() calls should
> > suffice in most/all cases.
> >
> > Now we need bug reports for those packages.
>
Can someone from pear qa step in on http://pear.php.net/bugs/14673 ?
The Cache package is unmaintained at this point in time.