emo/busybox
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

seedrng: restore error check on fsync

Browse Source 
Or else security people will never stop nagging us.

function                                             old     new   delta
seedrng_main                                         884     906     +22

Signed-off-by: Denys Vlasenko <vda.linux@googlemail.com>
This commit is contained in:
Denys Vlasenko 2022-05-02 15:03:32 +02:00
parent 5ba56e8b95
commit 3bfbcb5807
1 changed files with 12 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

13
miscutils/seedrng.c
View File

@ -134,12 +134,14 @@ static void seed_from_file_if_exists(const char *filename, int dfd, bool credit,
/* We are going to use this data to seed the RNG:
* we believe it to genuinely containing entropy.
* If this just-unlinked file survives
* (e.g. if machine crashes _right now_)
* (if machine crashes before deletion is recorded on disk)
* and we reuse it after reboot, this assumption
* would be violated. Fsync the directory to
* make sure file is gone:
* would be violated, and RNG may end up generating
* the same data. fsync the directory
* to make sure file is gone:
*/
fsync(dfd);
if (fsync(dfd) != 0)
bb_simple_perror_msg_and_die("I/O error");
//Length is not random, and taking its address spills variable to stack
// sha256_hash(hash, &seed_len, sizeof(seed_len));
@ -210,7 +212,8 @@ int seedrng_main(int argc UNUSED_PARAM, char **argv)
sha256_hash(&hash, &timestamp, sizeof(timestamp));
for (i = 0; i <= 1; i++) {
seed_from_file_if_exists(i == 0 ? NON_CREDITABLE_SEED_NAME : CREDITABLE_SEED_NAME,
seed_from_file_if_exists(
i == 0 ? NON_CREDITABLE_SEED_NAME : CREDITABLE_SEED_NAME,
dfd,
/*credit?*/ (opts ^ OPT_n) & i, /* 0, then 1 unless -n */
&hash);