diff options
author | Richard Levitte <levitte@openssl.org> | 2002-11-21 22:39:25 +0000 |
---|---|---|
committer | Richard Levitte <levitte@openssl.org> | 2002-11-21 22:39:25 +0000 |
commit | 91203a9482b94e4b9175a2a5a70d3dab3fdce694 (patch) | |
tree | 8e45620e986c796b8ca3ea7f76c93fa55f6b34ac | |
parent | 134fea9d0f2584cf222cd1630cf97e19a82aff35 (diff) |
Mention a current showstopper
-rw-r--r-- | STATUS | 14 |
1 files changed, 13 insertions, 1 deletions
@@ -1,6 +1,6 @@ OpenSSL STATUS Last modified at - ______________ $Date: 2002/11/19 09:34:38 $ + ______________ $Date: 2002/11/21 22:39:25 $ DEVELOPMENT STATE @@ -32,6 +32,18 @@ o BN_mod_mul verification fails for mips3-sgi-irix unless configured with no-asm + o [2002-11-21] + PR 343 mentions that scrubbing memory with 'memset(ptr, 0, n)' may + be optimized away in modern compilers. This is definitely not good + and needs to be fixed immediately. The formula to use is presented + in: + + http://online.securityfocus.com/archive/82/297918/2002-10-27/2002-11-02/0 + + The problem report that mentions this is: + + https://www.aet.TU-Cottbus.DE/rt2/Ticket/Display.html?id=343 + AVAILABLE PATCHES o |