Use nacl_secure_random() in rand_util_nacl.cc

base/rand_util_nacl.cc

Index: base/rand_util_nacl.cc
diff --git a/base/rand_util_nacl.cc b/base/rand_util_nacl.cc
index f9751217326b4c72730b98fa1018be49f12a4b1a..9c97048a923cd5198ee981e3eb0551969d1fb947 100644
--- a/base/rand_util_nacl.cc
+++ b/base/rand_util_nacl.cc
@@ -7,16 +7,15 @@
 #include "base/basictypes.h"
 #include "base/lazy_instance.h"
 #include "base/logging.h"
-#include "native_client/src/untrusted/irt/irt.h"
+#include "native_client/src/untrusted/nacl/nacl_random.h"

[Mark Seaborn, 2014/06/16 23:47:38]

I think it should work to #include this with:
#include <nacl/nacl_random.h>
Does that work?

[Peng, 2014/06/16 23:57:26]

It works. Done

 
 namespace {
 
 class NaclRandom {
  public:
   NaclRandom() {
-    const size_t result =
-        nacl_interface_query(NACL_IRT_RANDOM_v0_1, &random_, sizeof(random_));
-    CHECK_EQ(result, sizeof(random_));
+    int rv = nacl_secure_random_init();

[Mark Seaborn, 2014/06/16 23:39:25]

nacl_secure_random_init() is idempotent so you can actually simplify this by
just having a top-level function that does:

void GetRandomBytes(void* output, size_t num_bytes) {
  CHECK_EQ(0, nacl_secure_random_init());
  const int error = nacl_secure_random(...);
  ...
}

Then the use of LazyInstance can go away.

(I will simplify this on the NaCl side so that calling nacl_secure_random_init()
isn't needed at all.)

[Peng, 2014/06/16 23:57:26]

Done.

+    CHECK_EQ(rv, 0);
   }
 
   ~NaclRandom() {}
@@ -25,16 +24,13 @@ class NaclRandom {
     char* output_ptr = static_cast<char*>(output);
     while (num_bytes > 0) {
       size_t nread;
-      const int error = random_.get_random_bytes(output_ptr, num_bytes, &nread);
+      const int error = nacl_secure_random(output_ptr, num_bytes, &nread);
       CHECK_EQ(error, 0);
       CHECK_LE(nread, num_bytes);
       output_ptr += nread;
       num_bytes -= nread;
     }
   }
-
- private:
-  nacl_irt_random random_;
 };
 
 base::LazyInstance<NaclRandom>::Leaky g_nacl_random = LAZY_INSTANCE_INITIALIZER;