]> git.ipfire.org Git - thirdparty/systemd.git/commit
random-util: hash AT_RANDOM getauxval() value before using it
authorLennart Poettering <lennart@poettering.net>
Tue, 7 May 2019 21:26:55 +0000 (17:26 -0400)
committerLennart Poettering <lennart@poettering.net>
Tue, 7 May 2019 21:31:20 +0000 (17:31 -0400)
commit80eb560a5bd7439103036867d5e09a5e0393e5d3
treeed6412a75c971150aa63d31dd6930ce66a1e9c65
parentcc28145d51f62711fdc4b4c229aecd5778806419
random-util: hash AT_RANDOM getauxval() value before using it

Let's be a bit paranoid and hash the 16 bytes we get from getauxval()
before using them. AFter all they might be used by other stuff too (in
particular ASLR), and we probably shouldn't end up leaking that seed
though our crappy pseudo-random numbers.
src/basic/random-util.c