Bug 45110 - make mod_unique_id use a random generator
Summary: make mod_unique_id use a random generator
Status: RESOLVED FIXED
Alias: None
Product: Apache httpd-2
Classification: Unclassified
Component: mod_unique_id (show other bugs)
Version: 2.5-HEAD
Hardware: All All
: P3 enhancement (vote)
Target Milestone: ---
Assignee: Apache HTTPD Bugs Mailing List
URL:
Keywords: FixedInTrunk, PatchAvailable
Depends on:
Blocks:
 
Reported: 2008-06-01 08:53 UTC by Takashi Sato
Modified: 2012-02-26 16:48 UTC (History)
0 users


Attachments
use apr_generate_random_bytes (1.73 KB, patch)
2008-06-01 08:53 UTC, Takashi Sato 		Details | Diff
View All Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Takashi Sato 2008-06-01 08:53:17 UTC 
Created attachment 22047 [details]
use apr_generate_random_bytes

cur_unique_id.counter is initialized with present microsecond /10 modulo 65536. This initialization have been used since 1997.
But now APR has random generator, so I think mod_unique_id should use it.

It call apr_generate_random_bytes in child_init, so have no effect on perfomance.
Comment 1 Stefan Fritsch 2011-10-09 22:15:53 UTC 
fixed in trunk in r1171249
Comment 2 Stefan Fritsch 2012-02-26 16:48:31 UTC 
fixed in 2.4.1