whitelist getrandom for arc4random usage
arc4random is called by the linker for dlopen to randomize the library load order, among other uses. It's becoming more widely used over time. It calls getentropy at regular intervals to reseed itself, which uses the getrandom system call. This wasn't noticed because it reseeds only very rarely with typical usage in Android. This was quickly noticed on CopperheadOS where the hardened allocator based on OpenBSD malloc uses at least one (often more) byte of entropy from arc4random for each call to malloc, free, realloc, etc. It's still needed *eventually* without the hardened allocator but it would take a lot of plugin loading / unloading, etc. with dlopen / dlclose to hit it at the moment. Change-Id: I0a448e833916373871edfc68274ac31e314d54f7
Loading
Please register or sign in to comment