Bug 45110

Summary: make mod_unique_id use a random generator
Product: Apache httpd-2 Reporter: Takashi Sato <takashi.asfbugzilla>
Component: mod_unique_idAssignee: Apache HTTPD Bugs Mailing List <bugs>
Severity: enhancement Keywords: FixedInTrunk, PatchAvailable
Priority: P3    
Version: 2.5-HEAD   
Target Milestone: ---   
Hardware: All   
OS: All   
Attachments: use apr_generate_random_bytes

Description Takashi Sato 2008-06-01 08:53:17 UTC
Created attachment 22047 [details]
use apr_generate_random_bytes

cur_unique_id.counter is initialized with present microsecond /10 modulo 65536. This initialization have been used since 1997.
But now APR has random generator, so I think mod_unique_id should use it.

It call apr_generate_random_bytes in child_init, so have no effect on perfomance.
Comment 1 Stefan Fritsch 2011-10-09 22:15:53 UTC
fixed in trunk in r1171249
Comment 2 Stefan Fritsch 2012-02-26 16:48:31 UTC
fixed in 2.4.1