Skip to content
  • Nick Mathewson's avatar
    Assert on _all_ failures from RAND_bytes(). · c0aa9e0a
    Nick Mathewson authored
    Previously, we would detect errors from a missing RNG
    implementation, but not failures from the RNG code itself.
    
    Fortunately, it appears those failures do not happen in practice
    when Tor is using OpenSSL's default RNG implementation.  Fixes bug
    40390; bugfix on 0.2.8.1-alpha. This issue is also tracked as
    TROVE-2021-004. Reported by Jann Horn at Google's Project Zero.
    c0aa9e0a