tree a0201027edf3dfc9493c00342df56113a3457e24
parent d79bc9d397f9ef6af9a9281ec063ac4aad01a51c
author Adam Langley <agl@google.com> 1496264720 -0700
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1496273993 +0000

Clear PRNG states in FIPS mode.

FIPS requires that the CTR-DRBG state be zeroed on process exit, however
destructors for thread-local data aren't called when the process exits.

This change maintains a linked-list of thread-local state which is
walked on exit to zero each thread's PRNG state. Any concurrently
running threads block until the process finishes exiting.

Change-Id: Ie5dc18e1bb2941a569d8b309411cf20c9bdf52ef
Reviewed-on: https://boringssl-review.googlesource.com/16764
Reviewed-by: David Benjamin <davidben@google.com>
Commit-Queue: David Benjamin <davidben@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>