From 2aedfbdfe1dfb4df84418af4bb39c40ca1cc5128 Mon Sep 17 00:00:00 2001 From: Daniel Willmann Date: Thu, 8 Oct 2015 16:10:26 +0200 Subject: libmsc: Use RAND_bytes to generate a token [hfreyther: Add cast to uint8_t to fix compiler warning] --- openbsc/src/libmsc/db.c | 5 ++++- 1 file changed, 4 insertions(+), 1 deletion(-) diff --git a/openbsc/src/libmsc/db.c b/openbsc/src/libmsc/db.c index 4061fc102..9f265901c 100644 --- a/openbsc/src/libmsc/db.c +++ b/openbsc/src/libmsc/db.c @@ -1275,7 +1275,10 @@ int db_subscriber_alloc_token(struct gsm_subscriber *subscriber, uint32_t *token uint32_t try; for (;;) { - try = rand(); + if (RAND_bytes((uint8_t *) &try, sizeof(try)) != 1) { + LOGP(DDB, LOGL_ERROR, "RAND_bytes failed\n"); + return 1; + } if (!try) /* 0 is an invalid token */ continue; result = dbi_conn_queryf(conn, -- cgit v1.2.3