Changed session ID generation to use crypto generator, and this time - work. Heh.

1 files changed, 7 insertions, 6 deletions

diff --git a/OpenSim.Framework/UserProfile.cs b/OpenSim.Framework/UserProfile.cs
index eef6be1..0f21fb3 100644
--- a/OpenSim.Framework/UserProfile.cs
+++ b/OpenSim.Framework/UserProfile.cs
@@ -39,15 +39,16 @@ namespace OpenSim.Framework.User
 

         public void InitSessionData()

         {

+            RNGCryptoServiceProvider rand = new RNGCryptoServiceProvider();

 

-            System.Security.Cryptography.Rfc2898DeriveBytes b = new Rfc2898DeriveBytes(MD5passwd, 128);

+            byte[] randDataS = new byte[16];

+            byte[] randDataSS = new byte[16];

 

-            RNGCryptoServiceProvider rand = new RNGCryptoServiceProvider();

+            rand.GetBytes(randDataS);

+            rand.GetBytes(randDataSS);

 

-            CurrentSessionID = new LLUUID();

-            CurrentSecureSessionID = new LLUUID();

-            rand.GetBytes(CurrentSecureSessionID.Data);

-            rand.GetBytes(CurrentSessionID.Data);

+            CurrentSecureSessionID = new LLUUID(randDataSS,0);

+            CurrentSessionID = new LLUUID(randDataS,0);

         }

 

         public void AddSimCircuit(uint circuitCode, LLUUID regionUUID)