HomeFreeBSD

libradius: Rip out dubious use of srandomdev(3)+random(3)

Description

libradius: Rip out dubious use of srandomdev(3)+random(3)

These functions appear to intend to produce unpredictable results. Just use
arc4random.

While here, use an explicit_bzero instead of memset where the intent is clearly
to zero out a secret (clear_passphrase).

Details

Provenance
cemAuthored on
Parents
rS355694: kern/subr_unit: Rip srandomdev, random(3) out of dead code
Branches
Unknown
Tags
Unknown