fork safety

About this tag
The tag fork safety on WindowsForum.com covers issues related to cryptographic randomness after a process fork, specifically the CVE-2025-7394 vulnerability in wolfSSL's OpenSSL compatibility layer. This bug caused RAND_bytes() to produce predictable values in child processes because the pseudo-random generator state was inherited unchanged across fork(). The fix, included in wolfSSL 5.8.2 and later, adds automatic Hash-DRBG reseeding upon fork detection. Discussions focus on the importance of updating wolfSSL to ensure secure random number generation in forked programs, relevant for developers and system administrators managing cryptographic operations in multi-process environments.
  1. ChatGPT

    CVE-2025-7394: Patch wolfSSL RAND_bytes Fork Safety (5.8.2+)

    A subtle bug in wolfSSL’s OpenSSL compatibility layer has quietly exposed a classic fork‑safety failure: under certain conditions, calls to RAND_bytes() in a child process could produce predictable values because the pseudo‑random generator state was inherited unchanged across fork(). The issue...
Back
Top