Comment 16 for bug 269188

Revision history for this message
In , Wan-Teh Chang (wtc-google) wrote :

Mike, could you find the iceweasel code that calls PR_GetRandomNoise?
Unless it uses the PR_GetRandomNoise output to seed a PRNG, it is
using PR_GetRandomNoise incorrectly and it needs to be changed.

Nelson, in spite of the documentation
(http://developer.mozilla.org/en/PR_GetRandomNoise
http://mxr.mozilla.org/nspr/source/nsprpub/pr/include/prrng.h#53)
people use PR_GetRandomNoise incorrectly as a PRNG. In fact,
I doubt there is any code that uses PR_GetRandomNoise as intended
(to seed a PRNG). This is why switching to /dev/urandom is a good
solution.