Re: lib/46751 (arc4random_addrandom(3) always reinitializes)

[David Laight <david%l8s.co.uk@localhost>]

The following reply was made to PR lib/46751; it has been noted by GNATS.

From: David Laight <david%l8s.co.uk@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
Date: Mon, 20 Aug 2012 08:28:30 +0100

 On Mon, Aug 20, 2012 at 01:45:02AM +0000, Matthew Mondor wrote:
 > Subject: Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
 >  
 >  It appears that netbsd-6 still has 1.10, and that 1.12 fixes a security
 >  issue (which according to the commit comment also affects 1.10).
 >  
 >  Should some recent arc4random.c fixes be pulled up to netbsd-6?
 
 Looking at a diff of 1.10 to 1.16 (they are more similar than any
 of the intervening versions!) shows that there are 2 main changes:
 1) the LOCK/UNLOCK pairs for threaded programs
 2) the initialisation call in arc4random_buf()
 
 The latter might be deemed important!
 arc4random_buf() didn't exist before rev 1.10.
 
 Getting a bit late for pullups :-)
 
        David
 
 -- 
 David Laight: david%l8s.co.uk@localhost