Skip to content

modular_computers.generate_id uses minetest.get_password_hash in a PRNG. #14

@red-001

Description

@red-001

This is an API misuse (see the discussion on luanti-org/luanti#12564), I would replacing the function so that it uses SecureRandom with a fallback to PcgRandom.

local hash = minetest.get_password_hash(player_name, current_time)

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type
    No fields configured for issues without a type.

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions