- init win32 rng context once per process

diff --git a/main/main.c b/main/main.c
index 971eb819569b58098733f8fcdd0481914bf73387..dba55e2b9f9d73308203cb807cb2361294e6899e 100644 (file)
--- a/main/main.c
+++ b/main/main.c
@@ -32,6 +32,7 @@
 #include "win32/time.h"
 #include "win32/signal.h"
 #include "win32/php_win32_globals.h"
+#include "win32/winutil.h"
 #include <process.h>
 #elif defined(NETWARE)
 #include <sys/timeval.h>
@@ -1829,6 +1830,10 @@ int php_module_startup(sapi_module_struct *sf, zend_module_entry *additional_mod
        tsrm_ls = ts_resource(0);
 #endif
 
+#ifdef PHP_WIN32
+       php_win32_init_rng_lock();
+#endif
+
        module_shutdown = 0;
        module_startup = 1;
        sapi_initialize_empty_request(TSRMLS_C);
@@ -2148,6 +2153,10 @@ void php_module_shutdown(TSRMLS_D)
        WSACleanup();
 #endif
 
+#ifdef PHP_WIN32
+       php_win32_free_rng_lock();
+#endif
+
        sapi_flush(TSRMLS_C);
 
        zend_shutdown(TSRMLS_C);

diff --git a/win32/winutil.c b/win32/winutil.c
index 4238b2c740f2d2ce3329727730217be787b746b7..3216ffc837e339a1314fefead308b72f488048ac 100644 (file)
--- a/win32/winutil.c
+++ b/win32/winutil.c
@@ -49,26 +49,61 @@ int php_win32_check_trailing_space(const char * path, const int path_len) {
        }
 }
 
+HCRYPTPROV   hCryptProv;
+unsigned int has_crypto_ctx = 0;
+
+#ifdef ZTS
+MUTEX_T php_lock_win32_cryptoctx;
+void php_win32_init_rng_lock()
+{
+       php_lock_win32_cryptoctx = tsrm_mutex_alloc();
+}
+
+void php_win32_free_rng_lock()
+{
+       tsrm_mutex_lock(php_lock_win32_cryptoctx);
+       CryptReleaseContext(hCryptProv, 0);
+       has_crypto_ctx = 0;
+       tsrm_mutex_unlock(php_lock_win32_cryptoctx);
+       tsrm_mutex_free(php_lock_win32_cryptoctx);
+
+}
+#else
+#define php_win32_init_rng_lock();
+#define php_win32_free_rng_lock();
+#endif
+
+
+
 PHPAPI int php_win32_get_random_bytes(unsigned char *buf, size_t size) {  /* {{{ */
-       HCRYPTPROV   hCryptProv;
-       int has_context = 0;
+
+       unsigned int has_contextg = 0;
+
        BOOL ret;
        size_t i = 0;
 
-       if (!CryptAcquireContext(&hCryptProv, NULL, NULL, PROV_RSA_FULL, 0)) {
-               /* Could mean that the key container does not exist, let try 
-                  again by asking for a new one */
-               if (GetLastError() == NTE_BAD_KEYSET) {
-                       if (CryptAcquireContext(&hCryptProv, NULL, NULL, PROV_RSA_FULL, CRYPT_NEWKEYSET)) {
-                               has_context = 1;
-                       } else {
-                               return FAILURE;
+       tsrm_mutex_lock(php_lock_win32_cryptoctx);
+       if (has_crypto_ctx == 0) {
+               if (!CryptAcquireContext(&hCryptProv, NULL, NULL, PROV_RSA_FULL, CRYPT_MACHINE_KEYSET)) {
+                       /* Could mean that the key container does not exist, let try 
+                                again by asking for a new one */
+                       if (GetLastError() == NTE_BAD_KEYSET) {
+                               if (CryptAcquireContext(&hCryptProv, NULL, NULL, PROV_RSA_FULL, CRYPT_NEWKEYSET)) {
+                                       has_crypto_ctx = 1;
+                               } else {
+                                       has_crypto_ctx = 0;
+                               }
                        }
                }
        }
+       tsrm_mutex_unlock(php_lock_win32_cryptoctx);
+
+       if (has_crypto_ctx == 0) {
+               return FAILURE;
+       }
 
        ret = CryptGenRandom(hCryptProv, size, buf);
-       CryptReleaseContext(hCryptProv, 0);
+
        if (ret) {
                return SUCCESS;
        } else {

diff --git a/win32/winutil.h b/win32/winutil.h
index ac1d15d5717e3a8a3e458e692b1ade3f822b8709..a01f1fd6f24d07c07045d4a15405f0012a2f5753 100644 (file)
--- a/win32/winutil.h
+++ b/win32/winutil.h
@@ -21,3 +21,11 @@ PHPAPI char *php_win_err(int error);
 #define php_win_err()  php_win_err(GetLastError())
 int php_win32_check_trailing_space(const char * path, const int path_len);
 PHPAPI php_win32_get_random_bytes(unsigned char *buf, size_t size);
+
+#ifdef ZTS
+void php_win32_init_rng_lock();
+void php_win32_free_rng_lock();
+#else
+#define php_win32_init_rng_lock();
+#define php_win32_free_rng_lock();
+#endif