Avoid race condition.

Submitted by: Travis Vitek <vitek@roguewave.com>

1 files changed, 5 insertions, 0 deletions

diff --git a/CHANGES b/CHANGES
index e4c17789d4..5137037cda 100644
--- a/CHANGES
+++ b/CHANGES
@@ -12,6 +12,11 @@
          *) applies to 0.9.6a/0.9.6b and 0.9.7
          +) applies to 0.9.7 only
 
+  *) In crypto/rand/md_rand.c, set 'locking_thread' to current thread's ID
+     *before* setting the 'crypto_lock_rand' flag.  The previous code had
+     a race condition if 0 is a valid thread ID.
+     [Travis Vitek <vitek@roguewave.com>]
+
   +) Cleanup of EVP macros.
      [Ben Laurie]