atom feed6 messages in org.apache.tomcat.devRE: Tomcat 6 org.apache.catalina.ses...
FromSent OnAttachments
Andras RozsaApr 8, 2012 7:04 pm 
Christopher SchultzApr 9, 2012 10:18 am 
Christopher SchultzApr 9, 2012 10:21 am 
Caldarale, Charles RApr 9, 2012 10:23 am 
Christopher SchultzApr 9, 2012 10:35 am 
Andras RozsaApr 9, 2012 10:46 am 
Subject:RE: Tomcat 6 org.apache.catalina.session.ManagerBase issue
From:Caldarale, Charles R (Chuc@unisys.com)
Date:Apr 9, 2012 10:23:27 am
List:org.apache.tomcat.dev

From: Christopher Schultz [mailto:chr@christopherschultz.net] Subject: Re: Tomcat 6 org.apache.catalina.session.ManagerBase issue

Line 567: long update = ((byte) entropy[i]) << ((i % 8) * 8);

2. 'i' is reduced by the modulus operator to 0..7

And then multiplied by 8.

3. Thus, the value of entropy[i] is never left-shifted more than 7 bits

No, it's left shifted between 0 and 56 bits (maintaining byte alignment).
Information is lost.

- Chuck

THIS COMMUNICATION MAY CONTAIN CONFIDENTIAL AND/OR OTHERWISE PROPRIETARY
MATERIAL and is thus for use only by the intended recipient. If you received
this in error, please contact the sender and delete the e-mail and its
attachments from all computers.

--------------------------------------------------------------------- To unsubscribe, e-mail: dev-@tomcat.apache.org For additional commands, e-mail: dev-@tomcat.apache.org