FreeRADIUS / freeradius-client

A BSD licenced RADIUS client library
http://freeradius.org/freeradius-client/
Other
141 stars 100 forks source link

Fix: initialise PRNG properly #91

Closed mcpat closed 5 years ago

mcpat commented 5 years ago

When configuring the library through rc_config_init, the PRNG is not initalised. On platforms with no /dev/urandom this might be a serious security issue because passwords are not properly protected anymore.

So this commit introduces a new utility function rc_random which ensures, that the PRNG is initialised before the first call to random.

This commit fixes #82

Signed-off-by: Marcel Patzlaff m.patzlaff@pilz.de