logoalt Hacker News

mitxelayesterday at 11:47 AM0 repliesview on HN

The code didn't rely on uninitialized memory as an entropy source. The patch was incorrect and cleared the buffer in two places: one with uninitialised memory, and one where it had been filled with seed entropy.

The code you're responsible for is the code that runs on the CPU. Compilers in the day could not optimize this away.