Waf rebuilding issue with python3

Volker Lendecke Volker.Lendecke at SerNet.DE
Tue Dec 18 06:50:36 UTC 2018


On Tue, Dec 18, 2018 at 05:14:36PM +1300, Douglas Bagnall wrote:
> On 13/12/18 11:06 PM, Douglas Bagnall via samba-technical wrote:
> >>>
> >>> Yes, that is it, the per-exec seed for the hash function used to avoid
> >>> hash attacks on production servers.  Attached is a workaround I've
> >>> pushed to autobuild while someone finds the rouge hash.
> >>
> >> It's weird to put randomness into the hash determining the file
> >> content. But that's waf for you...
> >>
> > 
> > I can't reproduce it, but buildtools/wafsamba/samba_utils.py around 370
> > looks suspicious to me:
> 
> Forget that one. Do the affected people have Python 3.5, and the
> unaffected people 3.6 or 3.7?

I have debian 9.6 with python 3.5.3, and it is affected.

Volker

-- 
Besuchen Sie die verinice.XP 2019 in Berlin!
Anwenderkonferenz für Informationssicherheit
26.-28. Februar 2019 - im Hotel Radisson Blu
Info & Anmeldung hier: http://veriniceXP.org

SerNet GmbH, Bahnhofsallee 1b, 37081 Göttingen
phone: +49-551-370000-0, fax: +49-551-370000-9
AG Göttingen, HRB 2816, GF: Dr. Johannes Loxen
http://www.sernet.de, mailto:kontakt at sernet.de



More information about the samba-technical mailing list