The perils of security tools

[Alexander Klimov]

On Tue, 13 May 2008, Ben Laurie wrote:
> Had Debian done this in this case, we (the OpenSSL Team) would have
> fallen about laughing

I think we all should not miss this ROTFL experience:

Original code (see ssleay_rand_add)

 <http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=140&view=markup>,

the patch

 <http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&view=diff&r1=141&r2=140&p1=openssl/trunk/rand/md_rand.c&p2=/openssl/trunk/rand/md_rand.c>

and the end result

 <http://svn.debian.org/viewsvn/pkg-openssl/openssl/trunk/rand/md_rand.c?rev=141&view=markup>

-- 
Regards,
ASK

---------------------------------------------------------------------
The Cryptography Mailing List
Unsubscribe by sending "unsubscribe cryptography" to majordomo at metzdowd.com