Bad solution for "use strong randomness"

[Sc00bz]

LibreSSL's getentropy_urandom() calls gotdata() which checks if the data is not all zeros. If you are calling this for short random integers, then all zeros is a very possible random value.