projects / openssl.git / commit
? search:
summary | shortlog | log | commit | commitdiff | tree
(parent: accb300) | patch
Avoid multiple locks in FIPS mode.
authorDr. Stephen Henson <steve@openssl.org>
Wed, 4 Dec 2013 13:39:04 +0000 (13:39 +0000)
committerDr. Stephen Henson <steve@openssl.org>
Sun, 8 Dec 2013 13:23:14 +0000 (13:23 +0000)
commit17a2d0801fad5f6ef0ce14fbb394ef2c109746ae
tree6fd86950d7ac55243db4208d8f8e1710a8e2e56ftree | snapshot
parentaccb3007ace4a1c86a602b17fca557c0ad0f0fc5commit | diff
Avoid multiple locks in FIPS mode.

PR: 3176.

In FIPS mode ssleay_rand_bytes is only used for PRNG seeding and is
performed in either a single threaded context (when the PRNG is first
initialised) or under a lock (reseeding). To avoid multiple locks disable
use of CRYPTO_LOCK_RAND in FIPS mode in ssleay_rand_bytes.
(cherry picked from commit 53142f72c9b9c9bad2f39ca6200a4f04f5c8001c)
crypto/rand/md_rand.c diff | blob | history
Unnamed repository; edit this file 'description' to name the repository.