Check RAND_bytes() return value or use RAND_pseudo_bytes().
This commit is contained in:
@@ -224,7 +224,7 @@ static int ssl23_client_hello(SSL *s)
|
||||
#endif
|
||||
|
||||
p=s->s3->client_random;
|
||||
RAND_bytes(p,SSL3_RANDOM_SIZE);
|
||||
RAND_pseudo_bytes(p,SSL3_RANDOM_SIZE);
|
||||
|
||||
/* Do the message type and length last */
|
||||
d= &(buf[2]);
|
||||
@@ -285,7 +285,7 @@ static int ssl23_client_hello(SSL *s)
|
||||
i=ch_len;
|
||||
s2n(i,d);
|
||||
memset(&(s->s3->client_random[0]),0,SSL3_RANDOM_SIZE);
|
||||
RAND_bytes(&(s->s3->client_random[SSL3_RANDOM_SIZE-i]),i);
|
||||
RAND_pseudo_bytes(&(s->s3->client_random[SSL3_RANDOM_SIZE-i]),i);
|
||||
memcpy(p,&(s->s3->client_random[SSL3_RANDOM_SIZE-i]),i);
|
||||
p+=i;
|
||||
|
||||
|
Reference in New Issue
Block a user