When gnutls_global_init() is called manually from the application check the urandom fd for validity

That addresses the issue where a server closes all open file descriptors
and then calls gnutls_global_init().

1 files changed, 8 insertions, 0 deletions

diff --git a/lib/gnutls_global.c b/lib/gnutls_global.c
index e4a303fcd6..5f340533d1 100644
--- a/lib/gnutls_global.c
+++ b/lib/gnutls_global.c
@@ -208,6 +208,14 @@ int gnutls_global_init(void)
 
 	_gnutls_init++;
 	if (_gnutls_init > 1) {
+		if (_gnutls_init == 1 && _gnutls_init_ret == 0) {
+			/* some applications may close the urandom fd 
+			 * before calling gnutls_global_init(). in that
+			 * case reopen it */
+			ret = _gnutls_rnd_check();
+			if (ret < 0)
+				return gnutls_assert_val(ret);
+		}
 		ret = _gnutls_init_ret;
 		goto out;
 	}