Why is getentropy marked with warn_unused_result?
Florian Weimer
fw@deneb.enyo.de
Sun Jul 23 10:16:00 GMT 2017
* Paul Pluzhnikov:
> On Sat, Jul 22, 2017 at 2:14 PM, Florian Bruhin <me@the-compiler.org> wrote:
>
>> Why is that, since it shouldn't fail under normal circumstances (at
>> least that's what Qt's sources claim)?
>
> If you didn't check the return value, how would you ever know whether
> you got entropy or not?
>
> The fact that something doesn't fail under normal conditions doesn't
> absolve you from the need to check for abnormal conditions, especially
> when dealing with random data that is likely to be used for crypto.
I did not see the start of the thread. Was it posted to the
libc-alpha list? Do you have a pointer to the Qt sources in question?
In practice, a getentropy implementation which does not fail if called
properly requires emulation using /dev/urandom if the system call is
not available in the kernel, but the glibc community rejected that
approach.
More information about the Libc-alpha
mailing list