One for the fanbois

[Sysman]

Apple’s #gotofail SSL Security Bug was Easily Preventable « Barr Code

Ooooops.

Excellent use of the GOTO though.

I haven't written code like that since FORTRAN 77 came along.

Excellent indeed.

The code above violates at least two rules from Barr Group‘s Embedded C Coding Standard book

Screams of laughter. Don't need no steenkeeng book to tell us that the code is crud.

Go on, have a look yourself. I counted 47 'goto fail' statements in the source file sslKeyExchange.c

Non-Apple users shouldn't be too smug at this point...

Critical crypto bug leaves Linux, hundreds of apps open to eavesdropping

This GnuTLS bug is worse than the big Apple "goto fail" bug patched last week.

New Plan B: Tin foil hats.

[mudskipper]

[doodab]

It's not really for the fanbois. Most of them won't know what SSL is.

surely the apple version is iSsl?

[NotAllThere]

It's not really for the fanbois. Most of them won't know what SSL is.

[VectraMan]

Doh! That's clearly never even been stepped through once.

And people will still tell you Apple are somehow superior and more secure.

[Doggy Styles]

Apple’s #gotofail SSL Security Bug was Easily Preventable « Barr Code

Ooooops.

Excellent use of the GOTO though.

I haven't written code like that since FORTRAN 77 came along.

Oh dear. I hope the rest of their software QA is better than that.

[zeitghost]

Apple’s #gotofail SSL Security Bug was Easily Preventable « Barr Code

Ooooops.

Excellent use of the GOTO though.

I haven't written code like that since FORTRAN 77 came along.