$OpenBSD: patch-src_Lua_cpp,v 1.3 2017/10/17 10:39:12 sthen Exp $
Index: src/Lua.cpp
--- src/Lua.cpp.orig
+++ src/Lua.cpp
@@ -4051,8 +4051,8 @@ static int ntop_generate_csrf_value(lua_State* vm) {
   ntop->getTrace()->traceEvent(TRACE_DEBUG, "%s() called", __FUNCTION__);
 
 #ifdef __OpenBSD__
-  snprintf(random_a, sizeof(random_a), "%d", arc4random());
-  snprintf(random_b, sizeof(random_b), "%lu", time(NULL)*arc4random());
+  arc4random_buf(random_a, sizeof(random_a) - 1);
+  arc4random_buf(random_b, sizeof(random_b) - 1);
 #else
   snprintf(random_a, sizeof(random_a), "%d", rand());
   snprintf(random_b, sizeof(random_b), "%lu", time(NULL)*rand());
