News for hackers. Stuff that matters.

A comment on On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Addition’ to NSA’s PRISM. Parent comment

Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by nickls on Sunday February 23, 2014 @04:56AM (#7285436)
Doesn't look like any (major) modification to surrounding lines.

    if ((err = ReadyHash(&SSLHashSHA1, &hashCtx, ctx)) != 0)
        goto fail;
changes to:

    if ((err = ReadyHash(&SSLHashSHA1, &hashCtx)) != 0)
        goto fail;
See: http://www.diffnow.com/?report=ob51k

Diff35

[ Parent | on HN ]
Re:On the Timing of iOS’s SSL Vulnerability and Apple’s ‘Add... by pmjordan on Sunday February 23, 2014 @11:05AM (#7286255)
We only see the diff between released versions, not intermediate commits. For all we know, Apple developers use a single-pane diff tool, where such bugs are easy to miss.
[ Parent | on HN ]