pi-hole/FTL
1
0
Fork 0
mirror of https://github.com/pi-hole/FTL.git synced 2024-10-26 16:52:18 +02:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add fallback randomness generation method for glibc older than 2.25 (armv4t builds)

Browse Source 
Signed-off-by: DL6ER <dl6er@dl6er.de>
This commit is contained in:
DL6ER
2023-03-07 21:46:36 +01:00
parent 3c99a35e90
commit 10ad7dd873
1 changed files with 21 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/api/2fa.c
+21 -1
View File
@@ -13,7 +13,13 @@
#include "../webserver/json_macros.h"
#include "../log.h"
#include "../config/config.h"
#include <sys/random.h>
// getrandom() is only available since glibc 2.25
// https://www.gnu.org/software/gnulib/manual/html_node/sys_002frandom_002eh.html
#if !defined(__GLIBC__) || __GLIBC_MINOR__ > 24
#define HAVE_GETRANDOM
#include <sys/random.h>
#endif
// TOTP+HMAC
#include <nettle/hmac.h>
@@ -265,10 +271,24 @@ int generateTOTP(struct ftl_conn *api)
{
// Generate random secret using the system's random number generator
uint8_t random_secret[RFC6238_SECRET_LEN];
#ifdef HAVE_GETRANDOM
if(getrandom(random_secret, sizeof(random_secret), 0) < (ssize_t)sizeof(random_secret))
{
return send_json_error(api, 500, "internal_error", "Failed to generate random secret", strerror(errno));
}
#else
FILE *fp = fopen("/dev/urandom", "r");
if(fp == NULL)
{
return send_json_error(api, 500, "internal_error", "Failed to generate random secret", strerror(errno));
}
if(fread(random_secret, sizeof(random_secret), 1, fp) != 1)
{
fclose(fp);
return send_json_error(api, 500, "internal_error", "Failed to generate random secret", strerror(errno));
}
fclose(fp);
#endif
// Encode base32 secret
const size_t base32_len = sizeof(random_secret)*8/5+1;