Re: RFC/PATCH: Random pid generation

[Sean Hunter]

On Tue, Jan 11, 2000 at 01:44:02PM +0100, Marcus Sundberg wrote:
> "Ph. Marek" <[e-mail]> writes:
> 
> > Short summary:
> > More and more programs (eg
> > CGI-Scripts) use the PID as pseudo-random number.
> 
> Then they are broken.

Agreed.  Yet another example of what Alan once described as "My
programming sucks, go fix something else".  I don't think the os
should support or encourage ridiculously broken assumptions[1] in any
way.

Sean

[1]Especially not by bad cgi programmers.  Secure cgi is more
difficult than a lot of people seem to think, and random pids aint
going to stop null-byte PATHINFO attacks etc.