4 ms·
> It's not clear why openssl never adopted the patch OpenSSL already had an option to safely disable the bad behavior, -DPURIFY.
by nullc 1y ago
> It's not clear why openssl never adopted the patch
OpenSSL already had an option to safely disable the bad behavior, -DPURIFY.
- aragilar 1y agoIn one of two cases I believe? I wonder what would have happened if both calls ended up being wrapped, if the bug would have taken even longer than it did to be found...