diff options
| author | Kenny Root <kroot@google.com> | 2015-07-24 18:56:05 +0000 |
|---|---|---|
| committer | Gerrit Code Review <noreply-gerritcodereview@google.com> | 2015-07-24 18:56:05 +0000 |
| commit | 07f4f42347557420f105a72d9a93bc8ee88a3dc5 (patch) | |
| tree | 4d210b442e8e6742e9b0ff9dca4fc158c1a6a03e /src/crypto/rand/rand.c | |
| parent | 71a0705e8fc5c39ca5b1daa512ef90c37246a76f (diff) | |
| parent | bd9957e6e28506c4431ce8d3cadbc0a04905b15e (diff) | |
| download | external_boringssl-07f4f42347557420f105a72d9a93bc8ee88a3dc5.zip external_boringssl-07f4f42347557420f105a72d9a93bc8ee88a3dc5.tar.gz external_boringssl-07f4f42347557420f105a72d9a93bc8ee88a3dc5.tar.bz2 | |
Merge changes Icdc56a50,I63d5dc28,Ia7d0c5d8,I47406533
* changes:
Handle RDRAND failures.
dsa_pub_encode: Write out DSA parameters (p, q, g) in addition to key.
Fix for CVE-2015-1789.
Fixes for CVE-2015-1791.
Diffstat (limited to 'src/crypto/rand/rand.c')
| -rw-r--r-- | src/crypto/rand/rand.c | 5 |
1 files changed, 2 insertions, 3 deletions
diff --git a/src/crypto/rand/rand.c b/src/crypto/rand/rand.c index a647b6a..a96ac48 100644 --- a/src/crypto/rand/rand.c +++ b/src/crypto/rand/rand.c @@ -78,7 +78,8 @@ int RAND_bytes(uint8_t *buf, size_t len) { return 1; } - if (!CRYPTO_have_hwrand()) { + if (!CRYPTO_have_hwrand() || + !CRYPTO_hwrand(buf, len)) { /* Without a hardware RNG to save us from address-space duplication, the OS * entropy is used directly. */ CRYPTO_sysrand(buf, len); @@ -108,8 +109,6 @@ int RAND_bytes(uint8_t *buf, size_t len) { state->partial_block_used = sizeof(state->partial_block); } - CRYPTO_hwrand(buf, len); - if (len >= sizeof(state->partial_block)) { size_t remaining = len; while (remaining > 0) { |