From 5cbd2ea3f94aa8adec9b4486ac757d4d688e3f8c Mon Sep 17 00:00:00 2001 From: Pauli Date: Fri, 28 May 2021 14:46:40 +1000 Subject: add zero strenght arguments to BN and RAND RNG calls Reviewed-by: Tomas Mraz (Merged from https://github.com/openssl/openssl/pull/15513) --- crypto/dh/dh_key.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'crypto/dh') diff --git a/crypto/dh/dh_key.c b/crypto/dh/dh_key.c index 33ac134c51..6b8cd550f2 100644 --- a/crypto/dh/dh_key.c +++ b/crypto/dh/dh_key.c @@ -318,7 +318,7 @@ static int generate_key(DH *dh) goto err; l = dh->length ? dh->length : BN_num_bits(dh->params.p) - 1; if (!BN_priv_rand_ex(priv_key, l, BN_RAND_TOP_ONE, - BN_RAND_BOTTOM_ANY, ctx)) + BN_RAND_BOTTOM_ANY, 0, ctx)) goto err; /* * We handle just one known case where g is a quadratic non-residue: -- cgit v1.2.1