Re: lib/46751 (arc4random_addrandom(3) always reinitializes)

[David Holland <dholland-bugs%netbsd.org@localhost>]

The following reply was made to PR lib/46751; it has been noted by GNATS.

From: David Holland <dholland-bugs%netbsd.org@localhost>
To: gnats-bugs%NetBSD.org@localhost
Cc: 
Subject: Re: lib/46751 (arc4random_addrandom(3) always reinitializes)
Date: Wed, 22 Aug 2012 06:50:52 +0000

 On Mon, Aug 20, 2012 at 01:45:02AM +0000, Matthew Mondor wrote:
  >  > State-Changed-Why:
  >  > Fixed by rev 1.15 of lib/libc/gen/arc4random.c
  >  
  >  It appears that netbsd-6 still has 1.10, and that 1.12 fixes a security
  >  issue (which according to the commit comment also affects 1.10).
 
 You have misread, I think - 1.11 and 1.12 were pulled up in March, and
 the version in netbsd-6 is the same as 1.12.
 
  >  Should some recent arc4random.c fixes be pulled up to netbsd-6?
 
 Possibly. The problem in this PR does exist in 1.12; however, it might
 be best to fix it in -6 just by inserting the missing ! in the
 affected conditional.
 
 -- 
 David A. Holland
 dholland%netbsd.org@localhost