From: mkanat%bugzilla.org <>
Date: Tue, 3 Feb 2009 09:59:48 +0000 (+0000)
Subject: Bug 476594: [SECURITY] Calling srand() at startup time in mod_perl makes the same... 
X-Git-Tag: bugzilla-3.2.2~1
X-Git-Url: http://git.ipfire.org/cgi-bin/gitweb.cgi?a=commitdiff_plain;h=0131d84418111f886c5b3b8db8027a9a63a2f67f;p=thirdparty%2Fbugzilla.git

Bug 476594: [SECURITY] Calling srand() at startup time in mod_perl makes the same token be generated over and over
Patch By Max Kanat-Alexander <mkanat@bugzilla.org> r=justdave, a=mkanat
---

diff --git a/Bugzilla/Install/Localconfig.pm b/Bugzilla/Install/Localconfig.pm
index 28fac39fca..8857b7521c 100644
--- a/Bugzilla/Install/Localconfig.pm
+++ b/Bugzilla/Install/Localconfig.pm
@@ -188,7 +188,7 @@ EOT
     },
     {
         name    => 'site_wide_secret',
-        default => generate_random_password(256),
+        default => sub { generate_random_password(256) },
         desc    => <<EOT
 # This secret key is used by your installation for the creation and
 # validation of encrypted tokens to prevent unsolicited changes,