tree 575d263450cd90deb3095fc7eb4a6c6555018a37
parent cc9d935256539af2d3b7f831abf57c0d685ffd81
author David Benjamin <davidben@google.com> 1541182760 -0500
committer CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org> 1541183623 +0000

Don't overflow state->calls on 16TiB RAND_bytes calls.

This is an extremely important and practical use case. The comment that
state->calls is bounded by the reseed interval isn't quite true. We only
check on entry to the function, which means that it may exceed it by one
call's worth. Switch it to a size_t (which doesn't actually increase
memory because the struct was already padded).

Change-Id: Ia7646fd5b4142789c1d613280223baa4cd1a4a9b
Reviewed-on: https://boringssl-review.googlesource.com/c/32804
Commit-Queue: David Benjamin <davidben@google.com>
Commit-Queue: Adam Langley <agl@google.com>
Reviewed-by: Adam Langley <agl@google.com>
CQ-Verified: CQ bot account: commit-bot@chromium.org <commit-bot@chromium.org>