Re: Potential bug in win32 binary version?

[Simon Josefsson]

Simon Josefsson <address@hidden> writes:

> Thanks!  Still, it is a bug in gsasl to not check the return value from
> gc_nonce.  I suspect it did return a error value here about /dev/random
> not being present.  This can be a security problem so I think I need to
> write a brief security advisory about it, and do a new release.

For reference, the patch to fix this problem has been applied:

http://git.savannah.gnu.org/gitweb/?p=gsasl.git;a=commitdiff;h=5764322e7a759efac49852b6d74ed0dae2cc29f2

/Simon