Hacker News new | ask | show | jobs
by nullc 395 days ago
> It's not clear why openssl never adopted the patch

OpenSSL already had an option to safely disable the bad behavior, -DPURIFY.
1 comments
aragilar 394 days ago
In one of two cases I believe? I wonder what would have happened if both calls ended up being wrapped, if the bug would have taken even longer than it did to be found...
link