Ticket #10727: 10727.3.patch

wp-includes/class-phpass.php

@@ -3 +3 @@
  * Portable PHP password hashing framework.
  * @package phpass
  * @since 2.5
- * @version 0.1
+ * @version 0.2 / genuine.
  * @link http://www.openwall.com/phpass/
  */
 
@@ -29 +29 @@
  * Portable PHP password hashing framework.
  *
  * @package phpass
- * @version 0.1 / genuine
+ * @version 0.2 / genuine.
  * @link http://www.openwall.com/phpass/
  * @since 2.5
  */
@@ -49 +49 @@
 
                 $this->portable_hashes = $portable_hashes;
 
-                $this->random_state = microtime() . (function_exists('getmypid') ? getmypid() : '') . uniqid(rand(), TRUE);
-
+                $this->random_state = microtime() . uniqid(rand(), TRUE); // removed getmypid() for compability reasons
         }
 
         function get_random_bytes($count)
         {
                 $output = '';
-                if (($fh = @fopen('/dev/urandom', 'rb'))) {
+                if (is_readable('/dev/urandom') &&
+                    ($fh = @fopen('/dev/urandom', 'rb'))) {
                         $output = fread($fh, $count);
                         fclose($fh);
                 }