From cf66f90e91f0485be103698c089bdb9cde9fe43f Mon Sep 17 00:00:00 2001
From: deuce <>
Date: Fri, 19 Nov 2004 09:48:50 +0000
Subject: [PATCH] Seed random number generator in the session thread, not in
 the server thread.  (Low entropy issue)

---
 src/sbbs3/websrvr.c | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/src/sbbs3/websrvr.c b/src/sbbs3/websrvr.c
index aec7f091f9..02816298bf 100644
--- a/src/sbbs3/websrvr.c
+++ b/src/sbbs3/websrvr.c
@@ -2676,6 +2676,9 @@ void http_session_thread(void* arg)
 	thread_up(TRUE /* setuid */);
 	session.finished=FALSE;
 
+	srand(time(NULL));	/* Seed random number generator */
+	sbbs_random(10);	/* Throw away first number */
+
 	if(startup->options&BBS_OPT_NO_HOST_LOOKUP)
 		host=NULL;
 	else
@@ -3047,9 +3050,6 @@ void DLLCALL web_server(void* arg)
 
 		lprintf(LOG_INFO,"Compiled %s %s with %s", __DATE__, __TIME__, compiler);
 
-		srand(time(NULL));	/* Seed random number generator */
-		sbbs_random(10);	/* Throw away first number */
-
 		if(!winsock_startup()) {
 			cleanup(1);
 			return;
-- 
GitLab