| Summary: | make mod_unique_id use a random generator | ||
|---|---|---|---|
| Product: | Apache httpd-2 | Reporter: | Takashi Sato <takashi.asfbugzilla> |
| Component: | mod_unique_id | Assignee: | Apache HTTPD Bugs Mailing List <bugs> |
| Status: | RESOLVED FIXED | ||
| Severity: | enhancement | Keywords: | FixedInTrunk, PatchAvailable |
| Priority: | P3 | ||
| Version: | 2.5-HEAD | ||
| Target Milestone: | --- | ||
| Hardware: | All | ||
| OS: | All | ||
| Attachments: | use apr_generate_random_bytes | ||
fixed in 2.4.1 |
Created attachment 22047 [details] use apr_generate_random_bytes cur_unique_id.counter is initialized with present microsecond /10 modulo 65536. This initialization have been used since 1997. But now APR has random generator, so I think mod_unique_id should use it. It call apr_generate_random_bytes in child_init, so have no effect on perfomance.