[169598] in North American Network Operators' Group
Re: [ PRIVACY Forum ] Critical crypto bug leaves Linux,
daemon@ATHENA.MIT.EDU (Leo Bicknell)
Wed Mar 5 15:22:42 2014
From: Leo Bicknell <bicknell@ufp.org>
In-Reply-To: <10342793.10882.1393988876197.JavaMail.root@benjamin.baylink.com>
Date: Wed, 5 Mar 2014 14:21:56 -0600
To: Jay Ashworth <jra@baylink.com>
Cc: NANOG <nanog@nanog.org>
Errors-To: nanog-bounces+nanog.discuss=bloom-picayune.mit.edu@nanog.org
--Apple-Mail=_1749EB55-C970-4AE1-B250-72CE53C59400
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=us-ascii
On Mar 4, 2014, at 9:07 PM, Jay Ashworth <jra@baylink.com> wrote:
> Is this the *same* bug that just broke in Apple code last week?
No, the Apple bug was the existence of an /extra/ "goto fail;".
The GnuTLS bug was that it was /missing/ a "goto fail;".
I'm figuring the same developer worked on both, and just put the line in =
the wrong repository. :)
And yes, while this is a joke, Apple fixed their bug by removing a "goto =
fail;", and GnuTLS fixed theirs by adding a "goto fail;". I can't make =
up something that funny.
https://www.imperialviolet.org/2014/02/22/applebug.html
http://blog.existentialize.com/the-story-of-the-gnutls-bug.html
--=20
Leo Bicknell - bicknell@ufp.org - CCIE 3440
PGP keys at http://www.ufp.org/~bicknell/
--Apple-Mail=_1749EB55-C970-4AE1-B250-72CE53C59400
Content-Transfer-Encoding: 7bit
Content-Disposition: attachment;
filename=signature.asc
Content-Type: application/pgp-signature;
name=signature.asc
Content-Description: Message signed with OpenPGP using GPGMail
-----BEGIN PGP SIGNATURE-----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=YGv0
-----END PGP SIGNATURE-----
--Apple-Mail=_1749EB55-C970-4AE1-B250-72CE53C59400--
