Please remove MacGPG from gnupg.org due to serious security concerns

Werner Koch wk at gnupg.org
Sat Feb 21 12:26:30 CET 2015


On Fri, 20 Feb 2015 10:36, lukele at dressyvagabonds.com said:

> In order to work around the hang, we’re running this call in a separate thread now, and if it doesn’t return within a few seconds (5 at the moment), it sends a timeout to the scdaemon.

Why not using a simple alarm() based watchdog and termintate pcsc-wrapper
in this case?  We do the same in the keyserver helpers.

If would also be possible to do tomeout in the read call of apdu.c but
that adds complexity at the wrong place.


Shalom-Salam,

   Werner

-- 
Die Gedanken sind frei.  Ausnahmen regelt ein Bundesgesetz.




More information about the Gnupg-users mailing list