[Bug 1701] FIPS-140-2 requires call to RAND_cleanup() before the	program using RAND exits
    bugzilla-daemon at bugzilla.mindrot.org 
    bugzilla-daemon at bugzilla.mindrot.org
       
    Fri Mar 26 11:37:58 EST 2010
    
    
  
https://bugzilla.mindrot.org/show_bug.cgi?id=1701
Darren Tucker <dtucker at zip.com.au> changed:
           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |dtucker at zip.com.au
--- Comment #2 from Darren Tucker <dtucker at zip.com.au> 2010-03-26 11:37:57 EST ---
Is RAND_cleanup() signal-safe?  (I suspect not, and if it's not then
this potentially opens a signal race vulnerability in sshd, which is
the reason why all use of atexit was removed from OpenSSH previously.)
-- 
Configure bugmail: https://bugzilla.mindrot.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are watching the assignee of the bug.
You are watching someone on the CC list of the bug.
    
    
More information about the openssh-bugs
mailing list