From: Bruno Haible Date: Mon, 15 Aug 2022 21:21:05 +0000 (+0200) Subject: tempname: Fix a comment. X-Git-Url: https://gitweb.git.savannah.gnu.org/gitweb/?a=commitdiff_plain;h=5aca6419aaa799110fb811c527a91dee3f90e576;p=gnulib.git tempname: Fix a comment. * lib/tempname.c (try_tempname_len): Use of entropy makes the function more, not less, secure. --- diff --git a/ChangeLog b/ChangeLog index 8342001fdc..a060aa1740 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +2022-08-15 Bruno Haible + + tempname: Fix a comment. + * lib/tempname.c (try_tempname_len): Use of entropy makes the function + more, not less, secure. + 2022-08-15 Paul Eggert tempname: remove incorrect comment diff --git a/lib/tempname.c b/lib/tempname.c index 75a939e571..e6520191d7 100644 --- a/lib/tempname.c +++ b/lib/tempname.c @@ -273,7 +273,7 @@ try_tempname_len (char *tmpl, int suffixlen, void *args, /* Whether to consume entropy when acquiring random bits. On the first try it's worth the entropy cost with __GT_NOCREATE, which is inherently insecure and can use the entropy to make it a bit - less secure. On the (rare) second and later attempts it might + more secure. On the (rare) second and later attempts it might help against DoS attacks. */ bool use_getrandom = tryfunc == try_nocreate;