Check RAND_bytes() return value or use RAND_pseudo_bytes().

[openssl.git] / CHANGES

diff --git a/CHANGES b/CHANGES
index ff4dfc3620df9cd7b96afc82c7a26742efe981c5..9d96037cd4d164a80de2964a2aaf3d70c42a50d7 100644 (file)
--- a/CHANGES
+++ b/CHANGES
@@ -31,10 +31,6 @@
      (1 = ok, 0 = not seeded).  Also an error is recorded on the thread's
      error queue. New function RAND_pseudo_bytes() generates output that is
      guaranteed to be unique but not unpredictable.
-     (TO DO: always check the result of RAND_bytes when it is used in the
-     library, or use RAND_pseudo_bytes instead, because leaving the
-     error in the error queue but reporting success in a function that
-     uses RAND_bytes could confuse things considerably.)
      [Ulf Möller]
 
   *) Do more iterations of Rabin-Miller probable prime test (specifically,