Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS

To: antonio@xxxxxxxx, grobian@xxxxxxxxxx
Subject: Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
From: Mutt <fleas@xxxxxxxx>
Date: Thu, 11 Feb 2010 19:33:42 -0000
Auto-submitted: auto-generated
Cc: mutt-dev@xxxxxxxx
In-reply-to: <048.570b9bbe3d009a0d105c88d6bfc7da93@xxxxxxxx>
List-post: <mailto:mutt-dev@mutt.org>
List-unsubscribe: send mail to majordomo@mutt.org, body only "unsubscribe mutt-dev"
Mail-followup-to: fleas@xxxxxxxx
References: <048.570b9bbe3d009a0d105c88d6bfc7da93@xxxxxxxx>
Reply-to: fleas@xxxxxxxx
Sender: owner-mutt-dev@xxxxxxxx

#3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
------------------------------+---------------------------------------------
 Reporter:  antonio@â         |       Owner:  mutt-dev
     Type:  defect            |      Status:  new     
 Priority:  minor             |   Milestone:          
Component:  mutt              |     Version:  1.5.20  
 Keywords:  patch             |  
------------------------------+---------------------------------------------

Comment(by grobian):

 Is it really a good idea to call srand every time?  time() only returns
 seconds precision, and by the way it does it with a time_t, not a long.

-- 
Ticket URL: <http://dev.mutt.org/trac/ticket/3158#comment:3>
Mutt <http://www.mutt.org/>
The Mutt mail user agent

References:
- [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
  - From: Mutt

Prev by Date: mutt: new changeset
Next by Date: Re: [Mutt] #973: encrypt mail with more keys than recipient list (think mailinglist)
Previous by thread: Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
Next by thread: Re: [Mutt] #3158: CVE id CAN-2005-2351: less random temp file creation allows DOS
Index(es):
- Date
- Thread