Closed Bug 905625 Opened 11 years ago Closed 11 years ago

Possible issues arising from Android's broken PRNG

Categories

(Firefox for Android Graveyard :: General, defect)

Product:
Firefox for Android Graveyard
Component:
General
Platform:
All
Android
Type:
defect
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED DUPLICATE of bug 903907

People

(Reporter: mgoodwin, Unassigned)

Details

Android has a critical flaw in the PRNG exposed to applications via the Java APIs and OpenSSL (anything that doesn't use /dev/urandom directly).

Sync's probably OK (as we can't set that up from Fennec, so far as I can tell) but we may have other issues elsewhere.

Can we think about this, investigate possible issues and use this bug to track findings?
Status: NEW → RESOLVED
Closed: 11 years ago
Resolution: --- → DUPLICATE
Group: core-security → core-security-release
Product: Firefox for Android → Firefox for Android Graveyard
Group: core-security-release
You need to log in before you can comment on or make changes to this bug.