5be1ae28ef
Treat a zero length passed to ssleay_rand_add a no op: the existing logic zeroes the md value which is very bad. OpenSSL itself never does this internally and the actual call doesn't make sense as it would be passing zero bytes of entropy. Thanks to Marcus Meissner <meissner@suse.de> for reporting this bug. |
||
---|---|---|
.. | ||
.cvsignore | ||
Makefile | ||
md_rand.c | ||
rand.h | ||
rand_egd.c | ||
rand_err.c | ||
rand_lcl.h | ||
rand_lib.c | ||
rand_nw.c | ||
rand_os2.c | ||
rand_unix.c | ||
rand_vms.c | ||
rand_win.c | ||
randfile.c | ||
randtest.c |