openssh unix dev - May 2002 - [Bug 231] ssh-keygen has fatal error while updating comment in RSA1 key

http://bugzilla.mindrot.org/show_bug.cgi?id=231





------- Additional Comments From stevesk at pobox.com  2002-05-12 05:31 -------
the error is not seen in current i believe due to the fix to arc4random()
to call seed_rng() correctly.

is there a way we can reduce the diff in terms of moving function calls
around due to delaying RNG seeding?

http://www.eviladmin.org/cgi-bin/cvsweb.cgi/ssh-keygen.c.diff?r1=1.87&r2=1.88
http://www.eviladmin.org/cgi-bin/cvsweb.cgi/ssh-keygen.c.diff?r1=1.91&r2=1.92







------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

http://bugzilla.mindrot.org/show_bug.cgi?id=231





------- Additional Comments From djm at mindrot.org  2002-05-13 11:04 -------
We can just put the call to seed_rng() above all the actions. That is safe and
"future-proof" at the cost of some extraneous processing for some
options which
don't need it.

Alternately we can just move the chance comment call to below the seed_rng call



------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

I was going to update buildpkg.sh to optionally support
UsePrivilegeSeparation yes

My question is, do package builders want the option at package build time
or package install time?

-- 
Tim Rice				Multitalents	(707) 887-1469
tim at multitalents.net