As a developer on the PurifyPlus product at IBM, I'd like to contribute a
Purify usage note to this discussion.
I see that the issue is RAND_add using whatever memory it's given (some of
which can be uninitialized garbage) as entropy input for the random number
generator. Tools like Purify
Allan K Pratt wrote:
EASY FIX: wherever RAND_add is defined (macro? function?), give it a
different body for -DPURIFY builds. When PURIFY is defined, don't use
the
memory being passed in at all. This sounds extreme, but it should work.
Sure, the entropy factors will change and the resulting
