On 12/06/14 22:43, Otto Moerbeek wrote: > On Thu, Jun 12, 2014 at 10:26:56PM +0200, Matt Caswell via RT wrote: > >> Patch applied: >> https://git.openssl.org/gitweb/?p=openssl.git;a=commit;h=abfb989fe0b749ad61f1aa4cdb0ea4f952fc13e0 >> >> Many thanks for your contribution. >> >> Matt > > http://www.openbsd.org/cgi-bin/cvsweb/src/lib/libssl/src/ssl/ssl_ciph.c.diff?r1=1.38;r2=1.39 > > Again no attribution in problem report and commit. Claiming > independent discovery is not going to be credible.
The commit *is* attributed. The author is listed as Kurt Cancemi - this is as it is attributed in the patch supplied in the problem report. I cannot say how Kurt found this defect - that is for him to answer. All I can go on is the information supplied to me in the problem report and patch. I had no idea that openbsd had also discovered and fixed this defect until you sent the above link. Matt ______________________________________________________________________ OpenSSL Project http://www.openssl.org Development Mailing List openssl-dev@openssl.org Automated List Manager majord...@openssl.org
