[nitpicking] abort in arc4random?

2014-12-17 Thread Lorenzo Beretta
getentropy*.c: "cannot call abort() because some systems have unsafe corefiles" arc4random.c: "if(_rs_allocate(...) == -1) abort();" Am I missing any difference between the two cases? (brain,cvsweb,google+gmane weren't any help)

Re: [nitpicking] abort in arc4random?

2014-12-17 Thread Theo de Raadt
> getentropy*.c: "cannot call abort() because some systems have unsafe > corefiles" > arc4random.c: "if(_rs_allocate(...) == -1) abort();" > > Am I missing any difference between the two cases? > (brain,cvsweb,google+gmane weren't any help) Policy. getentropy() should eventually be a lower lev

Re: [nitpicking] abort in arc4random?

2014-12-18 Thread Theo de Raadt
> On 12/18/2014 12:14 AM, Theo de Raadt wrote: > >> getentropy*.c: "cannot call abort() because some systems have unsafe > >> corefiles" > >> arc4random.c: "if(_rs_allocate(...) == -1) abort();" > >> > >> Am I missing any difference between the two cases? > >> (brain,cvsweb,google+gmane weren't any

Re: [nitpicking] abort in arc4random?

2014-12-18 Thread Theo de Raadt
ssert(), or the "default:" >case in some switch statements where it's not supposed to happen, which >is morally an assertion). > > >In case I'm missing something really obvious, sorry again. > > > >From lory.fu...@infinito.it Thu Dec 18 15:19:07

Re: [nitpicking] abort in arc4random?

2014-12-18 Thread thevoid
> The comment says, AS A WHOLE: > > /* > * Entropy collection via /dev/urandom and sysctl have failed. > * > * No other API exists for collecting entropy. See the large > * comment block above. > * > * We have very few options: >

Re: [nitpicking] abort in arc4random?

2014-12-18 Thread Theo de Raadt
> > The comment says, AS A WHOLE: > > > > /* > > * Entropy collection via /dev/urandom and sysctl have failed. > > * > > * No other API exists for collecting entropy. See the large > > * comment block above. > > * > > * We have very fe