openbsd/src/lib/libcrypto/arc4random/getentropy_solaris.c, branch OPENBSD_6_8_BASE A mirror of https://github.com/libressl/openbsd.git https://git.lua4.win/openbsd/atom?h=OPENBSD_6_8_BASE 2020-05-17T14:44:20+00:00 As done everywhere else, use a local version of MINIMUM() and avoid 2020-05-17T14:44:20+00:00 deraadt 2020-05-17T14:44:20+00:00 urn:sha1:032a35a73bdeb0ea0007bfc5219e6c96db991681 conflict against a potential define min() from some other scope. Saw a mention somewhere a while back that the gotdata() function in 2018-11-20T08:04:28+00:00 deraadt 2018-11-20T08:04:28+00:00 urn:sha1:1c9e20cbc776ff1a1ba01d20a3d7ae740718e16e here could creates non-uniformity since very short fetches of 0 would be excluded. blocks of 0 are just as random as any other data, including blocks of 4 4 4.. This is a misguided attempt to identify errors from the entropy churn/gather code doesn't make sense, errors don't happen. ok bcook Update the link for the getentropy(2) manual to man.openbsd.org/ 2016-08-07T03:27:21+00:00 tb 2016-08-07T03:27:21+00:00 urn:sha1:45a99457661a695d9e6070e26d9383b3a955a536 ok deraadt@ unify files further 2015-09-11T11:52:55+00:00 deraadt 2015-09-11T11:52:55+00:00 urn:sha1:2a8f39dde4eb3fc8b492e8c665128c557ff500af unify versions, so they are easier to diff. 2015-08-25T17:26:43+00:00 deraadt 2015-08-25T17:26:43+00:00 urn:sha1:fc3d3d60211a42640c6c2273a1d4edf9901f1492 Use explicit_bzero() instead of memset() on buffers going out of scope. 2014-07-21T20:19:47+00:00 guenther 2014-07-21T20:19:47+00:00 urn:sha1:0872907b62794cd6aa17af938318ed13aef2aecc Also, zero the SHA256 context. suggested by "eric" in a comment on an opensslrampage.org post ok miod@ deraadt@ remove disabled main hook; we use phdr now; ok bcook 2014-07-19T16:12:00+00:00 deraadt 2014-07-19T16:12:00+00:00 urn:sha1:7d86fd87164e886f422ae29e3aab9bf04502316d Use dl_iterate_phdr() to iterate over the segments and throw the addresses 2014-07-13T13:37:38+00:00 deraadt 2014-07-13T13:37:38+00:00 urn:sha1:7b3b70e21bf263aeb1b8fa2297e567734a24367c into the hash; hoping the system has some ASLR or PIE. This replaces and substantially improves upon &main which proved problematic with some picky linkers. Work with kettenis, testing by beck Provide a link to the canonical API specification. 2014-07-13T13:03:09+00:00 deraadt 2014-07-13T13:03:09+00:00 urn:sha1:3eef0b7f101f6ffe732366f0ba4b4e78c672a5f7 ok beck Take away the use of the address of main as a source of entropy. Causes 2014-07-13T08:24:20+00:00 beck 2014-07-13T08:24:20+00:00 urn:sha1:9dc40c4cb8a8d7a877ed1c8f5bc3cbc3f2ac2851 distractions to people testing and seeing link errors in some setups. This will come back in another form ok deraadt@