From 5aca6419aaa799110fb811c527a91dee3f90e576 Mon Sep 17 00:00:00 2001 From: Bruno Haible Date: Mon, 15 Aug 2022 23:21:05 +0200 Subject: [PATCH] tempname: Fix a comment. * lib/tempname.c (try_tempname_len): Use of entropy makes the function more, not less, secure. --- ChangeLog | 6 ++++++ lib/tempname.c | 2 +- 2 files changed, 7 insertions(+), 1 deletion(-) diff --git a/ChangeLog b/ChangeLog index 8342001fdc..a060aa1740 100644 --- a/ChangeLog +++ b/ChangeLog @@ -1,3 +1,9 @@ +2022-08-15 Bruno Haible + + tempname: Fix a comment. + * lib/tempname.c (try_tempname_len): Use of entropy makes the function + more, not less, secure. + 2022-08-15 Paul Eggert tempname: remove incorrect comment diff --git a/lib/tempname.c b/lib/tempname.c index 75a939e571..e6520191d7 100644 --- a/lib/tempname.c +++ b/lib/tempname.c @@ -273,7 +273,7 @@ try_tempname_len (char *tmpl, int suffixlen, void *args, /* Whether to consume entropy when acquiring random bits. On the first try it's worth the entropy cost with __GT_NOCREATE, which is inherently insecure and can use the entropy to make it a bit - less secure. On the (rare) second and later attempts it might + more secure. On the (rare) second and later attempts it might help against DoS attacks. */ bool use_getrandom = tryfunc == try_nocreate; -- 2.39.5