Re: [PATCH] libssp should not use /dev/random on Windows

2015-02-09 Thread Jeff Law
On 02/06/15 02:34, Georg Koppen wrote: Hi, inline is a patch to avoid using /dev/random on Windows in ssp.c. If it is getting used there might be a local malicious process supplying fake random values (e.g. via C:\dev\random) rendering SSP useless. Comments/review are much appreciated. The patc

[PATCH] libssp should not use /dev/random on Windows

2015-02-06 Thread Georg Koppen
Hi, inline is a patch to avoid using /dev/random on Windows in ssp.c. If it is getting used there might be a local malicious process supplying fake random values (e.g. via C:\dev\random) rendering SSP useless. Comments/review are much appreciated. The patch is against the 4.9 branch: From 372698