openbsd/src/lib/libc, branch libressl-v2.1.2 A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=libressl-v2.1.2 2014-12-09T08:00:53+00:00 improve warnings from rand_r(), rand(), and random() 2014-12-09T08:00:53+00:00 deraadt 2014-12-09T08:00:53+00:00 urn:sha1:edffaf4998902baa8112fbdd357ca8d9f34c7b30 It may take a few iterations to get the tone right. previously discussed with millert In ingo's new world order, we do not want multiple manual pages describing 2014-12-09T07:28:46+00:00 deraadt 2014-12-09T07:28:46+00:00 urn:sha1:5cd5e0377a60528d90a8552d4705f760c6e324ee the same thingies. Therefore these "lists of functions" man pages can go away. Hurray! I've wanted these pages to die for around 10 years! ok ingo (and i think jmc) more standardsier: cast to int to make sure we keep the negative numbers. 2014-12-09T00:02:18+00:00 tedu 2014-12-09T00:02:18+00:00 urn:sha1:b42fd716191810615838cb7652a88c98100ca0df observed by jonas termansen Oops, got the sense of the test backwards. Hilarious that we didn't spot it. 2014-12-08T21:52:06+00:00 deraadt 2014-12-08T21:52:06+00:00 urn:sha1:430732678b2b335f9570495746738b681bd3f450 Change rand(), random(), drand48(), lrand48(), mrand48(), and srand48() 2014-12-08T21:45:20+00:00 deraadt 2014-12-08T21:45:20+00:00 urn:sha1:9736a7f2a9e739ee9fc431040def5680fbb8794a to returning strong random by default, source from arc4random(3). Parameters to the seeding functions are ignored, and the subsystems remain in strong random mode. If you wish the standardized deterministic mode, call srand_deterministic(), srandom_determistic(), srand48_deterministic(), seed48_deterministic() or lcong48_deterministic() instead. The re-entrant functions rand_r(), erand48(), nrand48(), jrand48() are unaffected by this change and remain in deterministic mode (for now). Verified as a good roadmap forward by auditing 8800 pieces of software. Roughly 60 pieces of software will need adaptation to request the deterministic mode. Violates POSIX and C89, which violate best practice in this century. ok guenther tedu millert delete documentation for deleted DES interfaces 2014-12-08T20:46:04+00:00 tedu 2014-12-08T20:46:04+00:00 urn:sha1:c8f8008b6d95ffedabe97be1582beacd08ae7afb remove cfree from documentation 2014-12-08T20:42:23+00:00 tedu 2014-12-08T20:42:23+00:00 urn:sha1:8645fd24a4be2d377f4b0f4eb9eaf33f9da4ebdc delete obsolete sunos cfree function. ok deraadt millert naddy 2014-12-08T20:39:16+00:00 tedu 2014-12-08T20:39:16+00:00 urn:sha1:0c22449a0dd3e3e61718aa116e3f4492fef3237a remove setkey and encrypt interfaces. they are useless and dangerous. 2014-12-08T20:36:18+00:00 tedu 2014-12-08T20:36:18+00:00 urn:sha1:1486349be5aff03787b02f76c765356bb3ab2984 ok deraadt naddy avoid left shift overflow in reallocarray. 2014-12-08T03:45:00+00:00 bcook 2014-12-08T03:45:00+00:00 urn:sha1:c2309f70a1d7d69c81f79e5ab9ad79e63d4d8e82 Some 64-bit platforms (e.g. Windows 64) have a 32-bit long. So, shifting 1UL 32-bits to the left causes an overflow. This replaces the constant 1UL with (size_t)1 so that we get the correct constant size for the platform. discussed with tedu@ & deraadt@