https://git.ruby-lang.org/ruby.git/commit/?id=0a67c21401

From 0a67c214010d6b77cf1f5e520933052c5368fb7d Mon Sep 17 00:00:00 2001
From: Nobuyoshi Nakada <nobu@r...>
Date: Thu, 9 Jan 2020 00:27:29 +0900
Subject: Ensure seed data to be cleared

To prevent from leaking the seed data.

diff --git a/random.c b/random.c
index d02cd01..788511d 100644
--- a/random.c
+++ b/random.c
@@ -504,6 +504,10 @@ make_seed_value(uint32_t *ptr, size_t len) https://github.com/ruby/ruby/blob/trunk/random.c#L504
     return seed;
 }
 
+#define with_random_seed(size, add) \
+    for (uint32_t seedbuf[(size)+(add)], loop = (fill_random_seed(seedbuf, (size)), 1); \
+         loop; explicit_bzero(seedbuf, (size)*sizeof(seedbuf[0])), loop = 0)
+
 /*
  * call-seq: Random.new_seed -> integer
  *
@@ -516,10 +520,9 @@ static VALUE https://github.com/ruby/ruby/blob/trunk/random.c#L520
 random_seed(VALUE _)
 {
     VALUE v;
-    uint32_t buf[DEFAULT_SEED_CNT+1];
-    fill_random_seed(buf, DEFAULT_SEED_CNT);
-    v = make_seed_value(buf, DEFAULT_SEED_CNT);
-    explicit_bzero(buf, DEFAULT_SEED_LEN);
+    with_random_seed(DEFAULT_SEED_CNT, 1) {
+        v = make_seed_value(seedbuf, DEFAULT_SEED_CNT);
+    }
     return v;
 }
 
@@ -1477,30 +1480,15 @@ Init_RandomSeedCore(void) https://github.com/ruby/ruby/blob/trunk/random.c#L1480
       provide a hint that an attacker guess siphash's seed.
     */
     struct MT mt;
-    uint32_t initial_seed[DEFAULT_SEED_CNT];
 
-    fill_random_seed(initial_seed, DEFAULT_SEED_CNT);
-    init_by_array(&mt, initial_seed, DEFAULT_SEED_CNT);
+    with_random_seed(DEFAULT_SEED_CNT, 0) {
+        init_by_array(&mt, seedbuf, DEFAULT_SEED_CNT);
+    }
 
     init_hash_salt(&mt);
-
-    explicit_bzero(initial_seed, DEFAULT_SEED_LEN);
     explicit_bzero(&mt, sizeof(mt));
 }
 
-static VALUE
-init_randomseed(struct MT *mt)
-{
-    uint32_t initial[DEFAULT_SEED_CNT+1];
-    VALUE seed;
-
-    fill_random_seed(initial, DEFAULT_SEED_CNT);
-    init_by_array(mt, initial, DEFAULT_SEED_CNT);
-    seed = make_seed_value(initial, DEFAULT_SEED_CNT);
-    explicit_bzero(initial, DEFAULT_SEED_LEN);
-    return seed;
-}
-
 /* construct Random::DEFAULT bits */
 static VALUE
 Init_Random_default(VALUE klass)
@@ -1510,7 +1498,10 @@ Init_Random_default(VALUE klass) https://github.com/ruby/ruby/blob/trunk/random.c#L1498
     VALUE v = TypedData_Wrap_Struct(klass, &random_mt_type, r);
 
     rb_gc_register_mark_object(v);
-    r->seed = init_randomseed(mt);
+    with_random_seed(DEFAULT_SEED_CNT, 1) {
+        init_by_array(mt, seedbuf, DEFAULT_SEED_CNT);
+        r->seed = make_seed_value(seedbuf, DEFAULT_SEED_CNT);
+    }
 
     return v;
 }
-- 
cgit v0.10.2


--
ML: ruby-changes@q...
Info: http://www.atdot.net/~ko1/quickml/