Commit message (Collapse) | Author | Age | Files | Lines | |
---|---|---|---|---|---|
* | only build the getrandom path if SYS_getrandom is defined. | bcook | 2014-08-16 | 1 | -3/+7 |
| | | | | like the sysctl path | ||||
* | getrandom(2) support for getentropy_linux | bcook | 2014-08-16 | 1 | -13/+10 |
| | | | | | | | | | | | This enables support for the new getrandom(2) syscall in Linux 3.17. If the call exists and fails, return a failure in getentropy(2) emulation as well. This adds a EINTR check in case the urandom pool is not initialized. Tested on Fedora Rawhide with 3.17rc0 and Ubuntu 14.04 ok deraadt@ | ||||
* | better match proposed syscall api | bcook | 2014-07-22 | 1 | -8/+2 |
| | |||||
* | protect sysctl path with SYS__sysctl instead; from enh@google, ok bcook | deraadt | 2014-07-21 | 1 | -6/+6 |
| | |||||
* | Use explicit_bzero() instead of memset() on buffers going out of scope. | guenther | 2014-07-21 | 1 | -2/+3 |
| | | | | | | | Also, zero the SHA256 context. suggested by "eric" in a comment on an opensslrampage.org post ok miod@ deraadt@ | ||||
* | cast from void * before math; enh@google | deraadt | 2014-07-21 | 1 | -2/+2 |
| | |||||
* | Demonstrate how new linux getrandom() will be called, at least until | deraadt | 2014-07-20 | 1 | -1/+37 |
| | | | | | | it shows up in libraries. Even the system call is probably not finalized. Bit dissapointed it has turned out to be a descriptor-less read() with EINVAL and EINTR error conditions, but we can work with it. | ||||
* | remove disabled main hook; we use phdr now; ok bcook | deraadt | 2014-07-19 | 1 | -7/+1 |
| | |||||
* | tab love | deraadt | 2014-07-19 | 1 | -3/+3 |
| | |||||
* | Only call getauxval(3) if HAVE_GETAUXVAL is defined. Fixes build on older | kettenis | 2014-07-16 | 1 | -1/+3 |
| | | | | | | | Linux (such as Ubuntu 12.04LTS) that don't have it yet. Seems the AT_XXX defines are pulled in by <link.h> now. ok beck@ | ||||
* | Use dl_iterate_phdr() to iterate over the segments and throw the addresses | deraadt | 2014-07-13 | 1 | -1/+14 |
| | | | | | | | into the hash; hoping the system has some ASLR or PIE. This replaces and substantially improves upon &main which proved problematic with some picky linkers. Work with kettenis, testing by beck | ||||
* | Provide a link to the canonical API specification. | deraadt | 2014-07-13 | 1 | -1/+4 |
| | | | | ok beck | ||||
* | Take away the use of the address of main as a source of entropy. Causes | beck | 2014-07-13 | 1 | -1/+5 |
| | | | | | | distractions to people testing and seeing link errors in some setups. This will come back in another form ok deraadt@ | ||||
* | Remove signed/unsigned warning, statement before declaration and | wouter | 2014-07-12 | 1 | -11/+12 |
| | | | | | | add a function to use function pointers that does not take sizeof(fptr). OK beck@ | ||||
* | guard inclusion of sys/sysctl.h so we can detect at compile time and | beck | 2014-07-12 | 1 | -1/+3 |
| | | | | | keep linux distros happy that don't have it. ok bcook@ | ||||
* | remove gratuitous differences, ok beck bcook | deraadt | 2014-07-12 | 1 | -6/+6 |
| | |||||
* | fix oops, accidental delete.. darn copying of files between machines | beck | 2014-07-08 | 1 | -2/+2 |
| | |||||
* | j should be an int, like repeat | beck | 2014-07-08 | 1 | -3/+4 |
| | |||||
* | unbreak last commit - but same intent, make re-seed less expensive | beck | 2014-07-08 | 1 | -12/+16 |
| | |||||
* | repeat calls to getentrypy() with the same pid likely indicate reseeds. | deraadt | 2014-07-08 | 1 | -3/+10 |
| | | | | | | Since we assume the PRNG above is doing "something old, something new" folding, shortcut and do fewer repeats through the timing loop. ok beck | ||||
* | fix HD() misuse; from brent cook | deraadt | 2014-06-26 | 1 | -2/+2 |
| | |||||
* | AT_BASE returns us the *address* of the start of ld.so, so | beck | 2014-06-25 | 1 | -2/+2 |
| | | | | | use the address, not what it points to (which is always the same) ok deraadt@ | ||||
* | get the page of data at AT_SYSINFO_EHDR | beck | 2014-06-25 | 1 | -2/+2 |
| | | | | ok deraadt@ | ||||
* | comment fixes from theo | beck | 2014-06-25 | 1 | -5/+6 |
| | |||||
* | Possibly obtain a little bit of entropy from addresses returned | beck | 2014-06-25 | 1 | -2/+23 |
| | | | | | by getauxval if we have it. ok deraadt@ | ||||
* | O_NOFOLLOW would be very nice to have here if the version of linux | beck | 2014-06-25 | 1 | -10/+11 |
| | | | | | we are running supports it. from enh@google.com | ||||
* | unbreak build of getentropy_sysctl - we need linux/sysctl.h, and | beck | 2014-06-23 | 1 | -18/+21 |
| | | | | RANDOM_UUID is an enum member. | ||||
* | unbreak - main needs to be extern in here somewhere. | beck | 2014-06-23 | 1 | -1/+2 |
| | |||||
* | repair indentation for an inner loop; shorten some macros and variable | deraadt | 2014-06-21 | 1 | -129/+135 |
| | | | | | names to shorten line lengths ok beck | ||||
* | hash in correct pointer | deraadt | 2014-06-21 | 1 | -2/+2 |
| | |||||
* | KNF | beck | 2014-06-20 | 1 | -48/+56 |
| | |||||
* | indent | deraadt | 2014-06-20 | 1 | -2/+2 |
| | |||||
* | rearrange so that the main function with the important comments is at the top | otto | 2014-06-20 | 1 | -78/+80 |
| | | | | ok deraadt@ beck@ | ||||
* | Work in progress on how to deal with the inherit unreliability of | beck | 2014-06-20 | 1 | -0/+439 |
/dev/urandom. Does well in the fallback case. Get it in tree so it can be worked on. ok otto@ deraadt@ |