Hacker News new | ask | show | jobs
by benjaminjackman 1664 days ago
Genuinely curious what the use case(s) of reading from uninitialized are. Performance?
1 comments

It was used as a source of randomness. Someone blindly fixing a "bug" as reported by a linter famously resulted in a major vulnerability in Debian: https://www.debian.org/security/2008/dsa-1571
This is incorrect.

If they had simply removed the offending line (or, indeed, set a preprocessor flag that was provided explicitly for that purpose) it would have been fine. The problem was that they also removed a similar looking line that was the path providing actual randomness.