Qt4-preview-feedback Archive, April 2007
4.3 QAuthenticator uses uninitialized rand() - Possibly security problem
Message 1 in thread
Hi,
The other day I was browsing thru the sources and I noticed that it
appears QAuthenticator is using rand() instead of qrand() and it's
seed is completely uninitilized, which will give you the same results
across each run, and thus completely predictable numbers in the
authentication algorithm.
Cheers,
Thiago A. Correa
To unsubscribe - send "unsubscribe" in the subject to qt4-preview-feedback-request@xxxxxxxxxxxxx
Message 2 in thread
On Saturday 21 April 2007, Thiago A. Corrêa wrote:
> Hi,
>
> The other day I was browsing thru the sources and I noticed that it
> appears QAuthenticator is using rand() instead of qrand() and it's
> seed is completely uninitilized, which will give you the same results
> across each run, and thus completely predictable numbers in the
> authentication algorithm.
Fixed. Thanks a lot for spotting that one :)
Cheers,
Lars
>
> Cheers,
> Thiago A. Correa
>
> To unsubscribe - send "unsubscribe" in the subject to
> qt4-preview-feedback-request@xxxxxxxxxxxxx
To unsubscribe - send "unsubscribe" in the subject to qt4-preview-feedback-request@xxxxxxxxxxxxx
