Re: Random number generation security problem
| From: | Helgi Þormar Þorbjörnsson | Date: | Tue, 07 Oct 2008 09:16:37 +0000 |
| Subject: | Re: Random number generation security problem | ||
| References: | 1 2 3 4 | Groups: | php.pear.dev php.pear.qa |
| Request: | Send a blank email to pear-dev+get-50828@lists.php.net to get a copy of this message | ||
On Tue, Oct 7, 2008 at 2:00 AM, Daniel O'Connor
<daniel.oconnor@gmail.com> wrote:
> On Mon, Sep 22, 2008 at 2:44 AM, Christian Weiske <cweiske@cweiske.de>wrote:
>
>> Hi again,
>>
>>
>> > > See
>> > >
>> > > http://www.suspekt.org/2008/08/17/mt_srand-and-not-so-random-numbers/
>> > I grepped through pear cvs and the following files seed the random
>> > number generator:
>> > Since php 4.2.0 we don't need to seed anymore since that's
>> > automatically done. Removing mt_srand() and srand() calls should
>> > suffice in most/all cases.
>> >
>> > Now we need bug reports for those packages.
>>
>
> Can someone from pear qa step in on
> http://pear.php.net/bugs/14673 ?
> The Cache package is unmaintained at this point in time.
>
I dealt with Cache, used to "maintain" it for a bit.
Regards
Helgi