It suddenly strikes me as probably a good idea to enforce that anyone

calling random_byte has previously called random_ref.

(I'm not aware of any current code getting this wrong! It just seems
to me to be the sort of thing you'd want to be really sure of.)

[originally from svn r9930]

diff --git a/sshrand.c b/sshrand.c
index 4c33f4a01877e488738ebe5297b8beb0302df3d4..85dfa0b6bfbdfe40812d408154759d37044ae0c0 100644 (file)
--- a/sshrand.c
+++ b/sshrand.c
@@ -234,6 +234,8 @@ void random_unref(void)
 
 int random_byte(void)
 {
+    assert(random_active);
+
     if (pool.poolpos >= POOLSIZE)
        random_stir();