<!-- 
RSS generated by JIRA (9.7.1#970001-sha1:2222b88b221c4928ef0de3161136cc90c8356a66) at Thu Feb 08 08:38:23 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>MongoDB Jira</title>
    <link>https://jira.mongodb.org</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.7.1</version>
        <build-number>970001</build-number>
        <build-date>13-04-2023</build-date>
    </build-info>


<item>
            <title>[GODRIVER-2349] Prevent session ID reuse due to lower-than-expected system clock resolution</title>
                <link>https://jira.mongodb.org/browse/GODRIVER-2349</link>
                <project id="14289" key="GODRIVER">Go Driver</project>
                    <description>&lt;p&gt;In various conditions, &lt;tt&gt;time.Now()&lt;/tt&gt; returns a time with lower-than-expected resolution (500&#956;s to 15ms). The Go driver uses &lt;tt&gt;time.Now()&lt;/tt&gt; to seed some pseudo-random number generators, including the one for generating session IDs &lt;a href=&quot;https://github.com/mongodb/mongo-go-driver/blob/630ff7cbfd2363b49bfa48968b80ce287e70ae85/x/mongo/driver/uuid/uuid.go#L21&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;here&lt;/a&gt;. Due to that, it&apos;s possible to start two processes that reproduce the same sequence of session IDs if they are started at almost the same time.&lt;/p&gt;

&lt;p&gt;Some known cases of low resolution clocks in Go:&lt;/p&gt;
&lt;ul&gt;
	&lt;li&gt;On Windows with versions of Go before 1.16 (see &lt;a href=&quot;https://github.com/golang/go/issues/8687&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;here&lt;/a&gt;)&lt;/li&gt;
&lt;/ul&gt;


&lt;p&gt;See the &lt;a href=&quot;https://go.googlesource.com/proposal/+/master/design/12914-monotonic.md&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;proposal for monotonic clocks in Go&lt;/a&gt; for more details about how Go measures time using both wall clocks and monotonic clocks.&lt;/p&gt;

&lt;p&gt;For seeding all pseudo-random number generators in the Go driver, replace &lt;tt&gt;time.Now()&lt;/tt&gt; with an &lt;tt&gt;int64&lt;/tt&gt; read from the &lt;tt&gt;&quot;crypto/rand&quot;&lt;/tt&gt; random source.&lt;/p&gt;</description>
                <environment></environment>
        <key id="2004618">GODRIVER-2349</key>
            <summary>Prevent session ID reuse due to lower-than-expected system clock resolution</summary>
                <type id="1" iconUrl="https://jira.mongodb.org/secure/viewavatar?size=xsmall&amp;avatarId=14703&amp;avatarType=issuetype">Bug</type>
                                            <priority id="10300" iconUrl="https://jira.mongodb.org/images/icons/priorities/medium.svg">Unknown</priority>
                        <status id="6" iconUrl="https://jira.mongodb.org/images/icons/statuses/closed.png" description="The issue is considered finished, the resolution is correct. Issues which are closed can be reopened.">Closed</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="13201">Fixed</resolution>
                                        <assignee username="matt.dale@mongodb.com">Matt Dale</assignee>
                                    <reporter username="matt.dale@mongodb.com">Matt Dale</reporter>
                        <labels>
                    </labels>
                <created>Fri, 18 Mar 2022 16:51:13 +0000</created>
                <updated>Sat, 28 Oct 2023 11:37:37 +0000</updated>
                            <resolved>Wed, 30 Mar 2022 22:28:54 +0000</resolved>
                                    <version>1.8.0</version>
                    <version>1.8.4</version>
                                    <fixVersion>1.9.0</fixVersion>
                    <fixVersion>1.8.5</fixVersion>
                                                        <votes>0</votes>
                                    <watches>2</watches>
                                                                                                                <comments>
                            <comment id="4446392" author="xgen-internal-githook" created="Thu, 31 Mar 2022 01:05:33 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Matt Dale&apos;, &apos;email&apos;: &apos;9760375+matthewdale@users.noreply.github.com&apos;, &apos;username&apos;: &apos;matthewdale&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-2349&quot; title=&quot;Prevent session ID reuse due to lower-than-expected system clock resolution&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-2349&quot;&gt;&lt;del&gt;GODRIVER-2349&lt;/del&gt;&lt;/a&gt; Seed all pseudorandom number generators with a crypto-secure random number. (#889)&lt;br/&gt;
Branch: release/1.8&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-go-driver/commit/af8a5b1b41053f414f3cbf0cef6c0188b0b30c2d&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-go-driver/commit/af8a5b1b41053f414f3cbf0cef6c0188b0b30c2d&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="4446229" author="xgen-internal-githook" created="Wed, 30 Mar 2022 22:27:51 +0000"  >&lt;p&gt;Author:&lt;/p&gt;
{&apos;name&apos;: &apos;Matt Dale&apos;, &apos;email&apos;: &apos;9760375+matthewdale@users.noreply.github.com&apos;, &apos;username&apos;: &apos;matthewdale&apos;}
&lt;p&gt;Message: &lt;a href=&quot;https://jira.mongodb.org/browse/GODRIVER-2349&quot; title=&quot;Prevent session ID reuse due to lower-than-expected system clock resolution&quot; class=&quot;issue-link&quot; data-issue-key=&quot;GODRIVER-2349&quot;&gt;&lt;del&gt;GODRIVER-2349&lt;/del&gt;&lt;/a&gt; Seed all pseudorandom number generators with a crypto-secure random number. (#889)&lt;br/&gt;
Branch: master&lt;br/&gt;
&lt;a href=&quot;https://github.com/mongodb/mongo-go-driver/commit/0cd9fa6de3b2c042f03453457a2272699ea75780&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-go-driver/commit/0cd9fa6de3b2c042f03453457a2272699ea75780&lt;/a&gt;&lt;/p&gt;</comment>
                            <comment id="4434108" author="JIRAUSER1259527" created="Fri, 25 Mar 2022 00:28:52 +0000"  >&lt;p&gt;PR: &lt;a href=&quot;https://github.com/mongodb/mongo-go-driver/pull/889&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://github.com/mongodb/mongo-go-driver/pull/889&lt;/a&gt;&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Depends</name>
                                                                <inwardlinks description="is depended on by">
                                                        </inwardlinks>
                                    </issuelinktype>
                            <issuelinktype id="10012">
                    <name>Related</name>
                                            <outwardlinks description="related to">
                                        <issuelink>
            <issuekey id="2011863">GODRIVER-2361</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="1921732">GODRIVER-2223</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                                                                                                                                                                                                                                <customfield id="customfield_15850" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                    <customfield id="customfield_12550" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>2|i06sp8:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10558" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                            </customfields>
    </item>
</channel>
</rss>