From 378abe0ca2a1224356342d63a962108de549162f Mon Sep 17 00:00:00 2001
From: deraadt <>
Date: Fri, 13 Jun 2014 15:36:37 +0000
Subject: use getgentropy() call. If it fails, things are pretty bad -- call
abort(). this direction discussed at length with miod beck tedu matthew etc
---
src/lib/libc/crypt/arc4random.c | 11 +++--------
1 file changed, 3 insertions(+), 8 deletions(-)
(limited to 'src')
diff --git a/src/lib/libc/crypt/arc4random.c b/src/lib/libc/crypt/arc4random.c
index e08b729a04..4b6cde63fb 100644
--- a/src/lib/libc/crypt/arc4random.c
+++ b/src/lib/libc/crypt/arc4random.c
@@ -1,4 +1,4 @@
-/* $OpenBSD: arc4random.c,v 1.31 2014/05/31 10:32:12 jca Exp $ */
+/* $OpenBSD: arc4random.c,v 1.32 2014/06/13 15:36:37 deraadt Exp $ */
/*
* Copyright (c) 1996, David Mazieres <dm@uun.org>
@@ -77,15 +77,10 @@ _rs_init(u_char *buf, size_t n)
static void
_rs_stir(void)
{
- int mib[2];
- size_t len;
u_char rnd[KEYSZ + IVSZ];
- mib[0] = CTL_KERN;
- mib[1] = KERN_ARND;
-
- len = sizeof(rnd);
- sysctl(mib, 2, rnd, &len, NULL, 0);
+ if (getentropy(rnd, sizeof rnd) == -1)
+ abort();
if (!rs_initialized) {
rs_initialized = 1;
--
cgit v1.2.3-55-g6feb