HarryR / nt365 / 26632890045

44%

push

github

rng: NtGenerateSecureRandom syscall

Append GenerateSecureRandom to the service table -- at the end, to keep every
existing ordinal stable, since KIKDISP.ASM hardcodes service 14/113 for the
trap-frame-synthesizing dispatch path. gensrv regenerates the kernel table
(systable.asm/sysstubs.asm) and the ntdll Nt/Zw stubs from the one services.tab.

NtGenerateSecureRandom probes the caller's buffer, squeezes into a kernel
staging buffer (RngGenerateBytes briefly raises IRQL under the pool lock, so its
output must land in non-paged memory), and copies out at PASSIVE_LEVEL under SEH
so a bad pointer fails the call instead of bugchecking.

Add the nt.dll.rng Lua binding and a selftest suite (exact-length draws,
non-constant output, large draw != all-zero, kernel-range pointer fails cleanly).

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

18 of 22 new or added lines in 2 files covered. (81.82%)

47692 of 114118 relevant lines covered (41.79%)

2815.43 hits per line