From owner-freebsd-current@FreeBSD.ORG Sat Jul 23 23:07:13 2005 Return-Path: X-Original-To: freebsd-current@freebsd.org Delivered-To: freebsd-current@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 4A3E216A41F; Sat, 23 Jul 2005 23:07:13 +0000 (GMT) (envelope-from grog@lemis.com) Received: from blackwater.lemis.com (wantadilla.lemis.com [192.109.197.135]) by mx1.FreeBSD.org (Postfix) with ESMTP id A0A9E43D48; Sat, 23 Jul 2005 23:07:12 +0000 (GMT) (envelope-from grog@lemis.com) Received: by blackwater.lemis.com (Postfix, from userid 1004) id 9E3E886DD9; Sun, 24 Jul 2005 08:37:11 +0930 (CST) Date: Sun, 24 Jul 2005 08:37:11 +0930 From: Greg 'groggy' Lehey To: "M. Warner Losh" Message-ID: <20050723230711.GD842@wantadilla.lemis.com> References: <20050723020120.GV842@wantadilla.lemis.com> <42E1DFCE.6090506@FreeBSD.org> <20050723064449.GZ842@wantadilla.lemis.com> <20050723.130941.93453281.imp@bsdimp.com> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="lBPdJKrYqo3eKYSb" Content-Disposition: inline In-Reply-To: <20050723.130941.93453281.imp@bsdimp.com> User-Agent: Mutt/1.4.2.1i Organization: LEMIS, PO Box 460, Echunga SA 5153, Australia Phone: +61-8-8388-8286 Fax: +61-8-8388-8725 Mobile: +61-418-838-708 WWW-Home-Page: http://www.lemis.com/~grog X-PGP-Fingerprint: 9A1B 8202 BCCE B846 F92F 09AC 22E6 F290 507A 4223 Cc: dougb@freebsd.org, freebsd-current@freebsd.org Subject: Re: cvs commit: src/games/fortune/fortune fortune.c X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 23 Jul 2005 23:07:13 -0000 --lBPdJKrYqo3eKYSb Content-Type: text/plain; charset=us-ascii Content-Disposition: inline On Saturday, 23 July 2005 at 13:09:41 -0600, M. Warner Losh wrote: > In message: <20050723064449.GZ842@wantadilla.lemis.com> > "Greg 'groggy' Lehey" writes: >> You should take a look at what I committed. It simply uses the >> microsecond value returned by getlocaltime() for the automatic seeding >> by srandomdev(). It fixes the problem. I can see only two >> explanations: >> >> 1. srandomdev(), random(4) or friends are broken. >> 2. random(4) has been initialized incorrectly. >> >> Currently I'm guessing (2), but I don't care much either way. > > When sradnomdev() is broken, *DO*NOT* kludge around them by > committing half-baked "fixes" like you did. This code is good enough for fortune. Nobody's claiming that it's a solution to random number generation. Others should look at that aspect, not get involved in a commit war. > It is broken. We need to find out the *REAL* cause of the problem. Agreed. Is anybody doing that? It's not my area. > If Rush gets more quotes than normal, and that annoys people to find > the real problem, we shouldn't mask it. It is a really bad choice > from a security point of view. So it's better to back perfectly valid code rather than to look for the real culprit? What kind of security is that? Greg -- The virus once contained in this message has lost interest in life, shrivelled up and died. LEMIS anti-virus has given it an appropriate burial. For further details see http://www.lemis.com/grog/lemis-virus.html Finger grog@lemis.com for PGP public key. See complete headers for address and phone numbers. --lBPdJKrYqo3eKYSb Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (FreeBSD) iD8DBQFC4s2fIubykFB6QiMRAi6FAJwPe8xnesZGxYkB0o1zgEBV6Q2hlgCgnnUy +FBVfHbHspqjSQL+NmzyJh4= =3/lv -----END PGP SIGNATURE----- --lBPdJKrYqo3eKYSb--