Re: BUG #4167: When generating UUID using UUID-OSSP module, UUIDs are not unique on Windows

Peter Eisentraut wrote:
> Am Mittwoch, 14. Mai 2008 schrieb nicoanto:
>> I am using the 8.3.1 version of PostgreSQL. I wrote a simple function on
>> order to generate UUID values using the UUID-OSSP module
>> The code of the function is the following one :
>>
>> CREATE FUNCTION uuidgen() RETURNS CHAR(36) AS $$
>> BEGIN
>> RETURN uuid_generate_v4()::CHAR(36);
>> END;
>> $$ LANGUAGE 'plpgsql';
>>
>>
>>
>> When using it in a loop, I have got 2 different behaviors :
>> * on an Ubuntu platform, the generated UUID values are unique
>> * on a Windows platform, the generated UUID values are not unique most of
>> the time.
>>
>> Do you have any idea on how to fix that bug on a Windows platform ?
>
> Congratulations, you have just independently rediscovered the Debian OpenSSL
> vulnerability, see http://www.debian.org/security/2008/dsa-1571. Get a new
> libssl package from the Ubuntu security repository. It's not a Windows bug;
> the numbers are supposed to be different.

I doubt that. There's no dependency from uuid library to openssl. And if
that was related, I would've expected to see non-unique values on
Ubuntu, not Windows.

Seems rather like a weakness in the Windows port of the ossp-uuid
library to me.

--
Heikki Linnakangas
EnterpriseDB http://www.enterprisedb.com