Re: random token re-used in subsequent requests [SOLVED]

2016-05-31 Thread Vincent Veyron
On Tue, 31 May 2016 19:13:25 +0200 demerphq wrote: > > If it can be replicated on a command line then yes. > It could not be replicated on the command line; I tried this, and got 10M unique keys : @arsene:~$ perl -le '%h=();for (1..10_000_000) {my $session_id = join "", map +(0..9,"a"..

Re: random token re-used in subsequent requests [SOLVED]

2016-05-31 Thread Vincent Veyron
On Tue, 31 May 2016 18:59:46 +0200 André Warnier wrote: > But now you have a 32-bit machine + OS, and a 32-bit perl, right ? now it's a 64-bit machine + OS. I use standard distribution packages for everything. I installed qemu-kvm and created a 32-bit VM guest on it to try and reproduce the p

Re: random token re-used in subsequent requests [SOLVED]

2016-05-31 Thread demerphq
On 27 May 2016 at 09:29, André Warnier wrote: > On 26.05.2016 16:01, Vincent Veyron wrote: >> >> On Mon, 16 May 2016 16:38:18 +0200 >> Vincent Veyron wrote: >> >>> Out of five different servers, the code works fine on four machines, and >>> a different token is generated every time the page is lo

Re: random token re-used in subsequent requests [SOLVED]

2016-05-31 Thread André Warnier
On 31.05.2016 18:40, Vincent Veyron wrote: On Fri, 27 May 2016 09:29:36 +0200 André Warnier wrote: The above strongly hints at some flaw in the srand() of perl, when called by a 32-bit perl, on a 64-bit OS/machine. Maybe it is worth passing this info along to the perl (language) developers,

Re: random token re-used in subsequent requests [SOLVED]

2016-05-31 Thread Vincent Veyron
On Fri, 27 May 2016 09:29:36 +0200 André Warnier wrote: > > The above strongly hints at some flaw in the srand() of perl, when called by > a 32-bit > perl, on a 64-bit OS/machine. > Maybe it is worth passing this info along to the perl (language) developers, > at www.perl.org ? > Sorry for

Re: random token re-used in subsequent requests [SOLVED]

2016-05-27 Thread André Warnier
On 26.05.2016 16:01, Vincent Veyron wrote: On Mon, 16 May 2016 16:38:18 +0200 Vincent Veyron wrote: Out of five different servers, the code works fine on four machines, and a different token is generated every time the page is loaded or re-loaded. On one server however, a previous token is b

Re: random token re-used in subsequent requests [SOLVED]

2016-05-26 Thread Vincent Veyron
On Mon, 16 May 2016 16:38:18 +0200 Vincent Veyron wrote: > Out of five different servers, the code works fine on four machines, and a > different token is generated every time the page is loaded or re-loaded. On > one server however, a previous token is being re-used Hi, The faulty server was