Use a securely seeded global PRNG for the VM.

It's not 2005 anymore.

1 files changed, 15 insertions, 0 deletions

diff --git a/src/lj_arch.h b/src/lj_arch.h
index 3e3581c2..626f6c13 100644
--- a/src/lj_arch.h
+++ b/src/lj_arch.h
@@ -633,4 +633,19 @@ extern void *LJ_WIN_LOADLIBA(const char *path);
 #define LJ_52                   0
 #endif
 
+/* -- VM security --------------------------------------------------------- */
+
+/* Don't make any changes here. Instead build with:
+**   make "XCFLAGS=-DLUAJIT_SECURITY_flag=value"
+*/
+
+/* Security defaults. */
+#ifndef LUAJIT_SECURITY_PRNG
+#define LUAJIT_SECURITY_PRNG    1
+#endif
+
+#ifndef LUAJIT_SECURITY_MCODE
+#define LUAJIT_SECURITY_MCODE   1
+#endif
+
 #endif