[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index][Old Index]
Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
The following reply was made to PR lib/46751; it has been noted by GNATS.
From: David Laight <david%l8s.co.uk@localhost>
Subject: Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
Date: Mon, 20 Aug 2012 08:28:30 +0100
On Mon, Aug 20, 2012 at 01:45:02AM +0000, Matthew Mondor wrote:
> Subject: Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
> It appears that netbsd-6 still has 1.10, and that 1.12 fixes a security
> issue (which according to the commit comment also affects 1.10).
> Should some recent arc4random.c fixes be pulled up to netbsd-6?
Looking at a diff of 1.10 to 1.16 (they are more similar than any
of the intervening versions!) shows that there are 2 main changes:
1) the LOCK/UNLOCK pairs for threaded programs
2) the initialisation call in arc4random_buf()
The latter might be deemed important!
arc4random_buf() didn't exist before rev 1.10.
Getting a bit late for pullups :-)
David Laight: david%l8s.co.uk@localhost
Main Index |
Thread Index |