Solidot: Heartbleed代码作者称是无心之过

Solidot

奇客的资讯，重要的东西

Heartbleed代码作者称是无心之过
http://solidot.org.feedsportal.com/c/33236/f/556826/s/393af796/sc/28/l/0L0Ssolidot0Borg0Cstory0Dsid0F390A92/story01.htm
Apr 11th 2014, 02:09

OpenSSL的日志显示，在程序代码中引入高危漏洞Heartbleed的责任人是德国程序员Robin Seggelmann。他在接受采访时表示，错误是无心之过，不是有意加入的。2011年新年前夕，他向OpenSSL项目递交了一系列bug修正和新增功能。但其中一个功能，他忘记去验证一个长度的变量。代码审查人Stephen Henson博士在审查代码时也没有注意到这个错误，这个严重bug随后就包含在了新版OpenSSL中。This entry passed through the Full-Text RSS service — if this is your content and you're reading it on someone else's site, please read the FAQ at fivefilters.org/content-only/faq.php#publishers.



You are receiving this email because you subscribed to this feed at https://blogtrottr.com

If you no longer wish to receive these emails, you can unsubscribe here:
https://blogtrottr.com/unsubscribe/cz0/jPbdSR