diff options
author | Dr. Stephen Henson <steve@openssl.org> | 2010-06-16 13:17:22 +0000 |
---|---|---|
committer | Dr. Stephen Henson <steve@openssl.org> | 2010-06-16 13:17:22 +0000 |
commit | daac87be95b6cf8ca140a36efc9af10129af5f7a (patch) | |
tree | d9d316f71c28ddd0b36987e2e2d3cc62e5a20682 /crypto/rand | |
parent | e97359435ee15e6d2c0580c76a58040e8dc3ce60 (diff) |
clarify comment
Diffstat (limited to 'crypto/rand')
-rw-r--r-- | crypto/rand/md_rand.c | 11 |
1 files changed, 7 insertions, 4 deletions
diff --git a/crypto/rand/md_rand.c b/crypto/rand/md_rand.c index 88088ce73c..b2f04ff13e 100644 --- a/crypto/rand/md_rand.c +++ b/crypto/rand/md_rand.c @@ -476,11 +476,14 @@ static int ssleay_rand_bytes(unsigned char *buf, int num) MD_Update(&m,(unsigned char *)&(md_c[0]),sizeof(md_c)); #ifndef PURIFY /* purify complains */ - /* DO NOT REMOVE THE FOLLOWING CALL TO MD_Update()! */ + /* The following line uses the supplied buffer as a small + * source of entropy: since this buffer is often uninitialised + * it may cause programs such as purify or valgrind to + * complain. So for those builds it is not used: the removal + * of such a small source of entropy has negligible impact on + * security. + */ MD_Update(&m,buf,j); - /* We know that line may cause programs such as - purify and valgrind to complain about use of - uninitialized data. */ #endif k=(st_idx+MD_DIGEST_LENGTH/2)-st_num; |