Instead of using arc4random() to modulate the TCP isn, call tcp_rndiss_next() and calculate the modulator. This ensures that modulated initial sequence numbers have the same properties regarding separation and non-repetition as those generated by our TCP stack.
Instead of using arc4random() to modulate the TCP isn, call tcp_rndiss_next()
and calculate the modulator. This ensures that modulated initial sequence
numbers have the same properties regarding separation and non-repetition as
those generated by our TCP stack.

ok markus@ frantzen@

orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars,orumin/openbsd-efivars