Commit b8621bdd authored by Pauli's avatar Pauli
Browse files

Fix bug in entropy gathering. 



This only impacts FIPS mode or someone who has enabled the FIPS 140.2
4.9.2 Conditional Tests.  i.e. nobody currently.

Fix a significant issue in the entropy gathering for the continuous RNG
testing.  The impact is using an uninitialised buffer instead of the gathered
entropy.

Reviewed-by: default avatarKurt Roeckx <kurt@roeckx.be>
(Merged from https://github.com/openssl/openssl/pull/8789)
parent 6fda11ae

crypto/rand/rand_crng_test.c

+1 −1
Original line number Diff line number Diff line
@@ -30,7 +30,7 @@ int rand_crngt_get_entropy_cb(unsigned char *buf) 
    while ((n = rand_pool_acquire_entropy(crngt_pool)) != 0)

        if (n >= CRNGT_BUFSIZ) {

            p = rand_pool_detach(crngt_pool);

            memcpy(crngt_prev, p, CRNGT_BUFSIZ);

            memcpy(buf, p, CRNGT_BUFSIZ);

            rand_pool_reattach(crngt_pool, p);

            return 1;

        }