From: Richard Levitte <levitte@openssl.org>
Date: Thu, 21 Nov 2002 22:39:25 +0000 (+0000)
Subject: Mention a current showstopper
X-Git-Tag: OpenSSL_0_9_7-beta5~45
X-Git-Url: https://git.librecmc.org/?a=commitdiff_plain;h=91203a9482b94e4b9175a2a5a70d3dab3fdce694;p=oweals%2Fopenssl.git

Mention a current showstopper
---

diff --git a/STATUS b/STATUS
index 5011d68bbd..c2e97283be 100644
--- a/STATUS
+++ b/STATUS
@@ -1,6 +1,6 @@
 
   OpenSSL STATUS                           Last modified at
-  ______________                           $Date: 2002/11/19 09:34:38 $
+  ______________                           $Date: 2002/11/21 22:39:25 $
 
   DEVELOPMENT STATE
 
@@ -32,6 +32,18 @@
     o BN_mod_mul verification fails for mips3-sgi-irix
       unless configured with no-asm
 
+    o [2002-11-21]
+      PR 343 mentions that scrubbing memory with 'memset(ptr, 0, n)' may
+      be optimized away in modern compilers.  This is definitely not good
+      and needs to be fixed immediately.  The formula to use is presented
+      in:
+
+      http://online.securityfocus.com/archive/82/297918/2002-10-27/2002-11-02/0
+
+      The problem report that mentions this is:
+
+      https://www.aet.TU-Cottbus.DE/rt2/Ticket/Display.html?id=343
+
   AVAILABLE PATCHES
 
     o