85465 - certutil fails to seed PRNG when stdin is closed or at EOF.

Status: RESOLVED FIXED

(NSS :: Tools, defect)

Description

[Nelson Bolyard (seldom reads bugmail)]

When certutil is invoked with a command that needs to use the PRNG to
do keygen (among other things), if the -z option is supplied certutil
uses the content of the named file to seed the PRNG, otherwise certutil
prompts the user for "random" input on stdin and reads stdin for the 
random input.  

The code that reads stdin fails to notice that stdin is at EOF, so 
it behaves as if all the characters entered by the user on stdin were 
EOF.  

The code should detect when it is getting EOF on stdin and either 
exit with an error code or else revert to some other means of getting
pseudo random input.

Comment 1

[Nelson Bolyard (seldom reads bugmail)]

Fixed in rev 1.4 of nss/cmd/certutil/keystuff.c.