Redo the VAX assembler version of bn_div_words().
[openssl.git] / STATUS
diff --git a/STATUS b/STATUS
index 8cb519575d5cc5c8dc1192bf22b81c5941404c2e..0d7707d0b6db1aaec46ab4bd406ba4381bd2f45a 100644 (file)
--- a/STATUS
+++ b/STATUS
@@ -1,11 +1,12 @@
 
   OpenSSL STATUS                           Last modified at
-  ______________                           $Date: 2002/11/19 09:34:34 $
+  ______________                           $Date: 2002/11/21 22:39:08 $
 
   DEVELOPMENT STATE
 
     o  OpenSSL 0.9.8:  Under development...
     o  OpenSSL 0.9.7-beta4: Released on November 19th, 2002
+       Debian GNU/Linux (kernel version 2.4.19, gcc 2.95.4)    - PASSED
     o  OpenSSL 0.9.7-beta3: Released on July 30th, 2002
     o  OpenSSL 0.9.7-beta2: Released on June 16th, 2002
     o  OpenSSL 0.9.7-beta1: Released on June  1st, 2002
     o BN_mod_mul verification fails for mips3-sgi-irix
       unless configured with no-asm
 
+    o [2002-11-21]
+      PR 343 mentions that scrubbing memory with 'memset(ptr, 0, n)' may
+      be optimized away in modern compilers.  This is definitely not good
+      and needs to be fixed immediately.  The formula to use is presented
+      in:
+
+      http://online.securityfocus.com/archive/82/297918/2002-10-27/2002-11-02/0
+
+      The problem report that mentions this is:
+
+      https://www.aet.TU-Cottbus.DE/rt2/Ticket/Display.html?id=343
+
   AVAILABLE PATCHES
 
     o