Ted Yu created AMBARI-24607:
-------------------------------
Summary: rand should not be used in WebSocketProtocol.h
Key: AMBARI-24607
URL: https://issues.apache.org/jira/browse/AMBARI-24607
Project: Ambari
Issue Type: Bug
Reporter: Ted Yu
In
ambari-admin/src/main/resources/ui/admin-web/node_modules/karma/node_modules/socket.io/node_modules/engine.io/node_modules/uws/src/WebSocketProtocol.h
:
{code}
if (!isServer) {
dst[1] |= 0x80;
uint32_t random = rand();
{code}
Linear congruential algorithms are too easy to break.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)
