4 ms·
For others wondering what this was referring to: http://taint.org/2008/05/13/153959a.html http://taint.org/2008/05/13/153959a.html TL;DR: To silence a valgrind
by howlgarnish 6y ago
For others wondering what this was referring to: http://taint.org/2008/05/13/153959a.html http://taint.org/2008/05/13/153959a.html
TL;DR: To silence a valgrind warning, Debian maintainers added a local patch to OpenSSL that commented out the entropy pool, making all SSL keys predictable.
- Dylan16807 6y agoMore specifically, they made a valid change that silenced a valid warning, and then in a terrible mistake they found a line somewhere else that looked the same and made the same change to it too.