Bug 45110 - make mod_unique_id use a random generator
Summary: make mod_unique_id use a random generator
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_unique_id (show other bugs)
Version: 2.5-HEAD
Hardware: All All
: P3 enhancement (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
Keywords: FixedInTrunk, PatchAvailable
Depends on:
Reported: 2008-06-01 08:53 UTC by Takashi Sato
Modified: 2012-02-26 16:48 UTC (History)
0 users

use apr_generate_random_bytes (1.73 KB, patch)
2008-06-01 08:53 UTC, Takashi Sato
Details | Diff

Note You need to log in before you can comment on or make changes to this bug.
Description Takashi Sato 2008-06-01 08:53:17 UTC
Created attachment 22047 [details]
use apr_generate_random_bytes

cur_unique_id.counter is initialized with present microsecond /10 modulo 65536. This initialization have been used since 1997.
But now APR has random generator, so I think mod_unique_id should use it.

It call apr_generate_random_bytes in child_init, so have no effect on perfomance.
Comment 1 Stefan Fritsch 2011-10-09 22:15:53 UTC
fixed in trunk in r1171249
Comment 2 Stefan Fritsch 2012-02-26 16:48:31 UTC
fixed in 2.4.1