Re: [PHP-DEV] #71915 openssl_random_pseudo_bytes is not "fork-safe"

2016-03-30 Thread Chris Riley
On 29 March 2016 at 19:49, Jakub Zelenka  wrote:

> I have added some feedback and assigned it to myself ;)
>
> On Tue, Mar 29, 2016 at 3:05 PM, Tom Worster  wrote:
>
> > mathieuk has requested feedback on a patch to mitigate this problem in
> PHP.
> >
> > https://bugs.php.net/bug.php?id=71915
> >
> > Tom
> >
> >
> >
>

Would the safest option here not just be upon fork, reseed the RNG from
/dev/urandom ?


Re: [PHP-DEV] #71915 openssl_random_pseudo_bytes is not "fork-safe"

2016-03-29 Thread Jakub Zelenka
I have added some feedback and assigned it to myself ;)

On Tue, Mar 29, 2016 at 3:05 PM, Tom Worster  wrote:

> mathieuk has requested feedback on a patch to mitigate this problem in PHP.
>
> https://bugs.php.net/bug.php?id=71915
>
> Tom
>
>
>