Theodore Tso wrote:

> On Thu, May 15, 2008 at 11:09:46AM -0500, John Parker wrote:
> > > change -DPURIFY to -DNO_UNINIT_DATA or something else which has a clearer
> > > intention, so that debug packages (or even base packages that want to be
> > > valgrind-friendly) have a straightforward mechanism to apply. Well, a
> > > straightforward mechanism that doesn't kill the PRNG outright, I mean
> > > (otherwise there is already a highly-publicised patch we could apply...)
> > 
> > What I was hoping for was a -DNO_UNINIT_DATA that wouldn't be the
> > default, but wouldn't reduce the keyspace either.
> 
> -DPURIFY *does* do what you want.

But thats a compile time option. I would prefer not to have to compile
my own version of OpenSSL just to be able to valgrind my program which
links against openssl.

Erik
-- 
-----------------------------------------------------------------
Erik de Castro Lopo
-----------------------------------------------------------------
#!/bin/sh
unzip ; strip; touch ; finger ; mount ; gasp ;
yes ; more ; umount ; sleep ;
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       openssl-dev@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to