1
0
mirror of https://github.com/samba-team/samba.git synced 2024-12-22 13:34:15 +03:00
samba-mirror/buildtools
Douglas Bagnall 068b366709 buildtools:pidl: avoid hash randomisation in pidl
Like many languages, Perl uses has randomisation to prevent nasty
users using crafted values that hash to the same number to effect a
denial of service. This means the traversal order of perl HASH tables
is different every time.

The IDL handed to pidl is trusted, so we don't really need
randomisation, but we do want to be sure the build is the same every
time.

I am not aware of hash randomisation causing problems, but it seems
prudent to avoid it.

We do a similar thing with PYTHONHASHSEED for the entire build.

Thanks to Freexian and the Debian LTS project for sponsoring this work.

BUG: https://bugzilla.samba.org/show_bug.cgi?id=13213

Signed-off-by: Douglas Bagnall <douglas.bagnall@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
2024-05-31 00:25:33 +00:00
..
bin buildtools: remove Python2 compatibility 2024-05-31 00:25:33 +00:00
examples buildtools: Fix code spelling 2023-03-28 09:33:31 +00:00
scripts configure/Makefile: export PYTHONHASHSEED=1 in all 'configure/Makefile' scripts 2022-03-29 22:32:32 +00:00
wafsamba buildtools:pidl: avoid hash randomisation in pidl 2024-05-31 00:25:33 +00:00
compare_config_h4.sh buildtools: Reformat shell scripts 2022-02-22 15:23:35 +00:00
compare_generated.sh buildtools: Reformat shell scripts 2022-02-22 15:23:35 +00:00
compare_install.sh buildtools: Reformat shell scripts 2022-02-22 15:23:35 +00:00
devel_env.sh buildtools: Fix PYTHONPATH and print it 2024-04-09 22:52:37 +00:00
README Include waf as an extracted source directory, rather than as a one-in-a-file script. 2012-01-04 22:34:20 +01:00

See http://code.google.com/p/waf/ for more information on waf

You can get a svn copy of the upstream source with:

  svn checkout http://waf.googlecode.com/svn/trunk/ waf-read-only

Samba currently uses waf 1.5, which can be found at:

  http://waf.googlecode.com/svn/branches/waf-1.5

To update the current copy of waf, use the update-waf.sh script in this
directory.