[Bug 1254032] New: 8.1.1 advice on using getpid to avoid fork problems is dangerously wrong

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1254032

            Bug ID: 1254032
           Summary: 8.1.1 advice on using getpid to avoid fork problems is
                    dangerously wrong
           Product: Fedora Documentation
           Version: devel
         Component: defensive-coding-guide
          Assignee: fweimer at redhat.com
          Reporter: sstewartgallus00 at mylangara.bc.ca
        QA Contact: docs-qa at lists.fedoraproject.org
                CC: fweimer at redhat.com



Description of problem:

If one forks a process, the original process dies and then the second one forks
again the last forked process can have the same pid as the original and so
getpid will not detect a change.  This was a widely noted weakness in LibreSSL
(see https://www.agwa.name/blog/post/libressls_prng_is_unsafe_on_linux.)

How reproducible:

This is very probably systematically reproducible in possibly affected
libraries but in practise should never really happen.

-- 
You are receiving this mail because:
You are the QA Contact for the bug.