Re: Entropy sources under WinXP

On 5/20/2007 10:05 PM, Ben Rudiak-Gould wrote:
Sebastian G. wrote:
You're forgetting another important condition: if you have a lock on
the key (access mask contains NOT_SHARED), or it doesn't change in
between. In any other case the NT kernel will happily overflow your
buffer.

If so, this is contrary to the documented behavior of the function and
is a serious bug. (If you disagree with that, quote me the part of the
documentation that supports you.) Furthermore, it's a bug that has never
been published. (If you disagree with that, direct me to a publication.)

So, if you can supply evidence that this bug exists, you should publish
it. I guarantee you it will cause a huge uproar and Microsoft will
quickly release a patch and update their documentation, since to do
otherwise would be a PR disaster.

I too would like to see some evidence supporting this assertion. I have
code that would break if what you say is true (as do thousands of other
people I'm sure) and I've never seen any evidence that it is causing a
problem.

--Mark

.

Relevant Pages

  • Weekly Python Patch/Bug Summary
    ... Patch / Bug Summary ... Help with Python codebase ... Update to Macintosh library documentation ... Segfaults on memory error ...
    (comp.lang.python)
  • Re: Ark of the Covenant dig
    ... The issue is documentation and the Yo crew didn't do it very well. ... Did Ron 'The Con' *ever* give the name of the independent Israeli lab ... If you have no evidence of this ever ...
    (talk.origins)
  • Weekly Python Patch/Bug Summary
    ... Patch / Bug Summary ... typo in liblocale.tex ... subprocess documentation ... Registry not updated by 2.4b1 installer ...
    (comp.lang.python)
  • Re: Tired of 100s of stupid Getter/Setter methods
    ... > reading the documentation that the library developer wrote. ... ability to become familiar with an API. ... Given the choice between finding out about a bug as I'm writing the ... say about a language that's one of the more readable that I work in. ...
    (comp.lang.java.programmer)
  • Re: Entropy sources under WinXP
    ... In any other case the NT kernel will happily overflow your buffer. ... this is contrary to the documented behavior of the function and is a serious bug. ... (If you disagree with that, quote me the part of the documentation that supports you.) ... I guarantee you it will cause a huge uproar and Microsoft will quickly release a patch and update their documentation, since to do otherwise would be a PR disaster. ...
    (sci.crypt)