openbsd/src/lib/libc/crypt/arc4random.c, branch OPENBSD_6_8_BASE

In the incredibly unbelievable circumstance where _rs_init() fails to

2019-03-24T17:56:54+00:00

allocate pages, don't call abort() because of corefile data leakage concerns, but simply _exit(). The reasoning is _rs_init() will only fail if someone finds a way to apply specific pressure against this failure point, for the purpose of leaking information into a core which they can read. We don't need a corefile in this instance to debug that. So take this "lever" away from whoever in the future wants to do that.

Wrap so that calls go direct and the symbols not in the

2015-09-13T08:31:48+00:00

C standard are all weak. Apply __{BEGIN,END}_HIDDEN_DECLS to gdtoa{,imp}.h, hiding the arch-specific __strtorx, __ULtox_D2A, __strtorQ, __ULtoQ_D2A symbols.

Add support for building arc4random with MSVC.

2015-09-10T18:53:50+00:00

By default, MSVC's stdlib.h defines min(), so we need to spell out something less common to avoid picking it up. ok deraadt@ beck@ miod@

Move to the universe.

2015-01-16T16:48:51+00:00

review by millert, binary checking process with doug, concept with guenther

back in september I did the large abstraction refactoring to allow these

2015-01-15T06:57:18+00:00

other systems to fit into the same mold, so add copyright

missing newline

2014-07-21T18:13:12+00:00

Move more OS-specific functionality to arc4random.h headers.

2014-07-20T20:51:13+00:00

Move and raise(SIGKILL) calls to OS-specific headers. On OpenBSD, move thread_private.h as well to arc4random.h. On Windows, use TerminateProcess on getentropy failure. ok deraadt@

Change _rs_allocate so it can combine the two regions (rs and rsx)

2014-07-19T00:08:43+00:00

into one if a system has an awesome getentropy(). In that case it is valid to totally throw away the rsx state in the child. If the getentropy() is not very good and has a lazy reseed operation, this combining is a bad idea, and the reseed should probably continue to use the "something old, something new" mix. _rs_allocate() can accomodate either method, but not on the fly. ok matthew

Seperate arc4random's os-dependent parts into static inline functions,

2014-07-18T02:05:55+00:00

making it much easier for libressl -portable to fill in the gaps. ok bcook beck

"Race-free because we're running single-threaded in a new

2014-07-17T14:30:41+00:00

address space, and once allocated rs is never deallocated." document the forkhandler to save reviewers time, with matthew