1
#! /bin/sh /usr/share/dpatch/dpatch-run
3
## entropy by <troyh@debian.org>
5
## DP: Changing the default behavior to not use apr_generate_random_bytes(), Debian use
6
## DP: the system APR which is configured to use /dev/random. In cases where the
7
## DP: entropy pool is drained svn commands can block waiting. Moving to the fallback
8
## DP: of using time. (Closes: #285708, #298822)
11
diff -urN a/subversion/libsvn_ra_svn/cram.c b/subversion/libsvn_ra_svn/cram.c
12
--- a/subversion/libsvn_ra_svn/cram.c 2004-11-13 12:27:22.000000000 -0700
13
+++ b/subversion/libsvn_ra_svn/cram.c 2005-11-08 10:59:14.000000000 -0700
15
* should prevent replay attacks in practice. */
16
static apr_status_t make_nonce(apr_uint64_t *nonce)
19
- return apr_generate_random_bytes((unsigned char *) nonce, sizeof(*nonce));
21
*nonce = apr_time_now();
26
svn_error_t *svn_ra_svn_cram_server(svn_ra_svn_conn_t *conn, apr_pool_t *pool,