Commits on Apr 11, 2023

1. src: fix CSPRNG when length exceeds INT_MAX …

   CSPRNG implicitly casts the size_t length argument to a signed int when
   calling RAND_bytes(), which leaves it up to the caller to ensure that
   the length argument actually fits into such a signed int. However, not
   all call sites explicitly ensure that, which could lead to subtle bugs.
   
   In OpenSSL 3, use RAND_bytes_ex() instead, which does not require
   casting the length to a signed int.
   
   In OpenSSL 1.1.1, RAND_bytes_ex() is not supported, thus we have to
   process blocks of size INT_MAX one by one.

   

   tniessen committed Apr 11, 2023
   Configuration menu

   • View commit details
   • Copy full SHA for 0ae6971
   • Browse repository at this point

   Copy the full SHA

   0ae6971 View commit details

   Browse the repository at this point in the history