[Bug 948] high CPU in sshd after tcp_wrappers deny

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=948





------- Additional Comments From dtucker at zip.com.au  2005-02-19 13:55 -------
Created an attachment (id=831)
 --> (http://bugzilla.mindrot.org/attachment.cgi?id=831&action=view)
check for closed fd in openssl's RAND_query_egd_bytes

This appears to be a bug in OpenSSL's prngd interface.

I think what is happening is prngd is closing sockets (the "fairness" limits? 
if so does the problem occur with prngd-0.9.27?) and OpenSSL does not handle
the the descriptor closing (read() will return zero) and repeatedly retries the
read.

Please try this patch to OpenSSL (against 0.9.7e but may apply to others),
rebuild then rebuild OpenSSH with the new OpenSSL.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.