[Bug 435] New: internal entropy gatherer

[bugzilla-daemon at mindrot.org]

http://bugzilla.mindrot.org/show_bug.cgi?id=435

           Summary: internal entropy gatherer
           Product: Portable OpenSSH
           Version: 3.5p1
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: major
          Priority: P2
         Component: ssh
        AssignedTo: openssh-unix-dev at mindrot.org
        ReportedBy: udo_guenthner at de.ibm.com


Gathering entropy from programs does not work. Using multiple -v in ssh shows
'timed out' and returned 0.00 bytes for all commands in ssh_prng_cmds. Looking
at the source code of 
ssh-rand-helper.c I found in line 309 and 310:

		dup2(p[1], STDOUT_FILENO);
		dup2(p[1], STDERR_FILENO);

I guess the first should be p[0] (because in line 362 we have

		bytes_read = read(p[0], buf, sizeof(buf));

p[0] is not set and in 365ff 

		if (bytes_read == -1) {
			error_abort = 1;

later (starting 399) error_abort causes the 'timed out' message.



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.