[gentoo-dev] Akamai secure memory allocator for OpenSSL?

2014-04-13 Thread Joshua Kinard
So one of the side-discussions happening after Heartbleed was the fact that OpenSSL has its own memory allocator code that effectively mitigates any C library-provided exploit mitigations (as discussed on the openbsd-misc ML at [1] and Ted Unangst's blogs at [2] and [3]). This is partially why th

Re: [gentoo-dev] Akamai secure memory allocator for OpenSSL?

2014-04-13 Thread Patrick Lauer
On 04/14/2014 04:42 AM, Joshua Kinard wrote: > > So one of the side-discussions happening after Heartbleed was the fact that > OpenSSL has its own memory allocator code that effectively mitigates any C > library-provided exploit mitigations (as discussed on the openbsd-misc ML at > [1] and Ted Una

[gentoo-dev] Automated Package Removal and Addition Tracker, for the week ending 2014-04-13 23h59 UTC

2014-04-13 Thread Robin H. Johnson
The attached list notes all of the packages that were added or removed from the tree, for the week ending 2014-04-13 23h59 UTC. Removals: x11-themes/gdm-themes-livecd2014-04-12 06:12:11 ulm Additions: app-admin/clog 2014-04-07 12:07:00 tomwij dev-ruby/pygments_rb

Re: [gentoo-dev] Akamai secure memory allocator for OpenSSL?

2014-04-13 Thread Joshua Kinard
On 04/13/2014 20:17, Patrick Lauer wrote: > On 04/14/2014 04:42 AM, Joshua Kinard wrote: >> >> So one of the side-discussions happening after Heartbleed was the fact that >> OpenSSL has its own memory allocator code that effectively mitigates any C >> library-provided exploit mitigations (as discus