Item

1718627440 · 2026-10-28T13:15:15.000Z

> the random maintainer had no idea what they were doing

Upstream was involved in it as well. Sure it was a communication problem, but it's not like the maintainer just decided to this unilaterally. Also this WAS undefined behaviour, so from a language perspective it was already broken, even if it worked accidentally in practice.

direwolf20 · 2026-10-28T20:20:09.000Z

The Debian maintained patched by "fixing" two very similar looking "bugs" on different but identical lines of code:

One that mixed uninitialised data to the entropy pool.

And another one that mixed initialised data to the entropy pool with the exact same function call. Which was, in fact, almost all of the entropy.