Use arc4random_buf() when requesting more than a single word of output

Use arc4random_uniform() when the desired random number upper bound
is not a power of two

ok deraadt@ millert@

1 files changed, 3 insertions, 3 deletions

diff --git a/libexec/identd/parse.c b/libexec/identd/parse.c
index dd4c3e11a8a..768b2ec9f3b 100644
--- a/libexec/identd/parse.c
+++ b/libexec/identd/parse.c
@@ -1,4 +1,4 @@
-/*	$OpenBSD: parse.c,v 1.45 2007/09/26 02:50:36 ray Exp $	*/
+/*	$OpenBSD: parse.c,v 1.46 2008/04/13 00:22:17 djm Exp $	*/
 
 /*
  * This program is in the public domain and may be used freely by anyone
@@ -105,9 +105,9 @@ gentoken(char *buf, int len)
 		return;
 	for (p = buf; len > 1; p++, len--) {
 		if (p == buf)
-			*p = token0cnv[arc4random() % (sizeof token0cnv-1)];
+			*p = token0cnv[arc4random_uniform(sizeof(token0cnv)-1)];
 		else
-			*p = tokencnv[arc4random() % (sizeof tokencnv-1)];
+			*p = tokencnv[arc4random_uniform(sizeof(tokencnv)-1)];
 	}
 	*p = '\0';
 }