[Webkit-unassigned] [Bug 168774] Add a test verifying cache deduplication is not sensitive to SHA1 collision attack

bugzilla-daemon at webkit.org bugzilla-daemon at webkit.org
Fri Feb 24 19:58:09 PST 2017


https://bugs.webkit.org/show_bug.cgi?id=168774

Alexey Proskuryakov <ap at webkit.org> changed:

           What    |Removed                     |Added
----------------------------------------------------------------------------
                 CC|                            |ap at webkit.org

--- Comment #45 from Alexey Proskuryakov <ap at webkit.org> ---
We now have rep sharing disabled, so technically, re-landing the test would not cause the problem. But it would break mirrors that haven't made this change, so let's not do that. 

As the tests can incorporate PHP or any CGI script, it would indeed be straightforward to do some processing at run time. It can be done entirely in memory, no need to lay down temporary files. Can be any kind of archive or even as simple as flipping one bit.

-- 
You are receiving this mail because:
You are the assignee for the bug.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.webkit.org/pipermail/webkit-unassigned/attachments/20170225/6f809ab3/attachment.html>


More information about the webkit-unassigned mailing list