On Thursday 02 April 2009 04:44:55 Marc Haisenko wrote:
> Just a little load thinking... my patch *seems* to fix the blinding
> issue. All the patch does is to make sure that once the thread/process
> id's are different locking is *always* done and rsa->mt_blinding is
> always used.
>
> But since locking seems to be a NOP in our case this may not fix our
> problem. Yet it seems to as we have no more Bad Record MACs since I
> have introduced the patch.
>
> I don't get why...

Well the fact that rsa->blinding and rsa->mt_blinding are both 
initialised by *locked* lazy-initialisation, could explain why you're 
having grief when the locking is NOP'd out?

> Anyway, I'll do the locking implementation in OpenSER and report back
> in a few days.

Good luck.

Cheers,
Geoff

-- 
Un terrien, c'est un singe avec des clefs de char...
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to