[
https://issues.apache.org/jira/browse/AMBARI-24607?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Ted Yu updated AMBARI-24607:
----------------------------
Description:
In
ambari-admin/src/main/resources/ui/admin-web/node_modules/karma/node_modules/socket.io/node_modules/engine.io/node_modules/uws/src/WebSocketProtocol.h
:
{code}
if (!isServer) {
dst[1] |= 0x80;
uint32_t random = rand();
{code}
Linear congruential algorithms are too easy to break.
was:
In
ambari-admin/src/main/resources/ui/admin-web/node_modules/karma/node_modules/socket.io/node_modules/engine.io/node_modules/uws/src/WebSocketProtocol.h
:
{code}
if (!isServer) {
dst[1] |= 0x80;
uint32_t random = rand();
{code}
Linear congruential algorithms are too easy to break.
> rand should not be used in WebSocketProtocol.h
> ----------------------------------------------
>
> Key: AMBARI-24607
> URL: https://issues.apache.org/jira/browse/AMBARI-24607
> Project: Ambari
> Issue Type: Bug
> Reporter: Ted Yu
> Priority: Minor
>
> In
> ambari-admin/src/main/resources/ui/admin-web/node_modules/karma/node_modules/socket.io/node_modules/engine.io/node_modules/uws/src/WebSocketProtocol.h
> :
> {code}
> if (!isServer) {
> dst[1] |= 0x80;
> uint32_t random = rand();
> {code}
> Linear congruential algorithms are too easy to break.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
