Hacker News Reader

Follow-up email: http://seclists.org/fulldisclosure/2014/Apr/149

> Not used anywhere though, just a corpse lying around in the code. — Jann Horn

Not in OpenSSL, but Ruby uses it: https://github.com/ruby/ruby/blob/1aa54bebaf274bc08e72f9ad38...

Ruby uses a version of it they copied into their source tree. You can't really fault OpenSSL for another project copying one of their internal, static functions. I've never looked at Ruby's code base before. Did they just fork all of OpenSSL?

EDIT: I see you made a patch for it. High five!

The code in question is a Ruby FFI wrapper for OpenSSL (not a fork). Originally the function wasn't static, so when OpenSSL made it static, Ruby copied the function implementation to their source tree, as to avoid breaking their API.

Reply on news.ycombinator.com