Migration: go1.20

transport/simple-obfs/http.go

@@ -2,10 +2,11 @@ package obfs
 
 import (
 	"bytes"
+	"crypto/rand"
 	"encoding/base64"
 	"fmt"
 	"io"
-	"math/rand"
+	mathRand "math/rand"
 	"net"
 	"net/http"
 
@@ -65,7 +66,7 @@ func (ho *HTTPObfs) Write(b []byte) (int, error) {
 		randBytes := make([]byte, 16)
 		rand.Read(randBytes)
 		req, _ := http.NewRequest("GET", fmt.Sprintf("http://%s/", ho.host), bytes.NewBuffer(b[:]))
-		req.Header.Set("User-Agent", fmt.Sprintf("curl/7.%d.%d", rand.Int()%54, rand.Int()%2))
+		req.Header.Set("User-Agent", fmt.Sprintf("curl/7.%d.%d", mathRand.Int()%54, mathRand.Int()%2))
 		req.Header.Set("Upgrade", "websocket")
 		req.Header.Set("Connection", "Upgrade")
 		req.Host = ho.host

transport/simple-obfs/tls.go

@@ -2,19 +2,15 @@ package obfs
 
 import (
 	"bytes"
+	"crypto/rand"
 	"encoding/binary"
 	"io"
-	"math/rand"
 	"net"
 	"time"
 
 	"github.com/Dreamacro/clash/common/pool"
 )
 
-func init() {
-	rand.Seed(time.Now().Unix())
-}
-
 const (
 	chunkSize = 1 << 14 // 2 ** 14 == 16 * 1024
 )

transport/ssr/obfs/random_head.go

@@ -1,9 +1,10 @@
 package obfs
 
 import (
+	"crypto/rand"
 	"encoding/binary"
 	"hash/crc32"
-	"math/rand"
+	mathRand "math/rand"
 	"net"
 
 	"github.com/Dreamacro/clash/common/pool"
@@ -53,7 +54,7 @@ func (c *randomHeadConn) Write(b []byte) (int, error) {
 	c.buf = append(c.buf, b...)
 	if !c.hasSentHeader {
 		c.hasSentHeader = true
-		dataLength := rand.Intn(96) + 4
+		dataLength := mathRand.Intn(96) + 4
 		buf := pool.Get(dataLength + 4)
 		defer pool.Put(buf)
 		rand.Read(buf[:dataLength])

transport/ssr/obfs/tls1.2_ticket_auth.go

@@ -3,8 +3,9 @@ package obfs
 import (
 	"bytes"
 	"crypto/hmac"
+	"crypto/rand"
 	"encoding/binary"
-	"math/rand"
+	mathRand "math/rand"
 	"net"
 	"strings"
 	"time"
@@ -90,7 +91,7 @@ func (c *tls12TicketConn) Write(b []byte) (int, error) {
 		buf := pool.GetBuffer()
 		defer pool.PutBuffer(buf)
 		for len(b) > 2048 {
-			size := rand.Intn(4096) + 100
+			size := mathRand.Intn(4096) + 100
 			if len(b) < size {
 				size = len(b)
 			}
@@ -196,7 +197,7 @@ func packSNIData(buf *bytes.Buffer, u string) {
 }
 
 func (c *tls12TicketConn) packTicketBuf(buf *bytes.Buffer, u string) {
-	length := 16 * (rand.Intn(17) + 8)
+	length := 16 * (mathRand.Intn(17) + 8)
 	buf.Write([]byte{0, 0x23})
 	binary.Write(buf, binary.BigEndian, uint16(length))
 	tools.AppendRandBytes(buf, length)
@@ -221,6 +222,6 @@ func (t *tls12Ticket) getHost() string {
 		host = ""
 	}
 	hosts := strings.Split(host, ",")
-	host = hosts[rand.Intn(len(hosts))]
+	host = hosts[mathRand.Intn(len(hosts))]
 	return host
 }

transport/ssr/protocol/auth_aes128_sha1.go

@@ -2,9 +2,10 @@ package protocol
 
 import (
 	"bytes"
+	"crypto/rand"
 	"encoding/binary"
 	"math"
-	"math/rand"
+	mathRand "math/rand"
 	"net"
 	"strconv"
 	"strings"
@@ -198,7 +199,7 @@ func (a *authAES128) packData(poolBuf *bytes.Buffer, data []byte, fullDataLength
 }
 
 func trapezoidRandom(max int, d float64) int {
-	base := rand.Float64()
+	base := mathRand.Float64()
 	if d-0 > 1e-6 {
 		a := 1 - d
 		base = (math.Sqrt(a*a+4*d*base) - a) / (2 * d)
@@ -219,10 +220,10 @@ func (a *authAES128) getRandDataLengthForPackData(dataLength, fullDataLength int
 		if revLength > -1460 {
 			return trapezoidRandom(revLength+1460, -0.3)
 		}
-		return rand.Intn(32)
+		return mathRand.Intn(32)
 	}
 	if dataLength > 900 {
-		return rand.Intn(revLength)
+		return mathRand.Intn(revLength)
 	}
 	return trapezoidRandom(revLength, -0.3)
 }
@@ -247,7 +248,7 @@ func (a *authAES128) packAuthData(poolBuf *bytes.Buffer, data []byte) {
 	copy(macKey, a.iv)
 	copy(macKey[len(a.iv):], a.Key)
 
-	poolBuf.WriteByte(byte(rand.Intn(256)))
+	poolBuf.WriteByte(byte(mathRand.Intn(256)))
 	poolBuf.Write(a.hmac(macKey, poolBuf.Bytes())[:6])
 	poolBuf.Write(a.userID[:])
 	err := a.authData.putEncryptedData(poolBuf, a.userKey, [2]int{packedAuthDataLength, randDataLength}, a.salt)
@@ -263,9 +264,9 @@ func (a *authAES128) packAuthData(poolBuf *bytes.Buffer, data []byte) {
 
 func (a *authAES128) getRandDataLengthForPackAuthData(size int) int {
 	if size > 400 {
-		return rand.Intn(512)
+		return mathRand.Intn(512)
 	}
-	return rand.Intn(1024)
+	return mathRand.Intn(1024)
 }
 
 func (a *authAES128) packRandData(poolBuf *bytes.Buffer, size int) {

transport/ssr/protocol/base.go

@@ -4,9 +4,10 @@ import (
 	"bytes"
 	"crypto/aes"
 	"crypto/cipher"
+	"crypto/rand"
 	"encoding/base64"
 	"encoding/binary"
-	"math/rand"
+	mathRand "math/rand"
 	"sync"
 	"time"
 
@@ -38,7 +39,7 @@ func (a *authData) next() *authData {
 	defer a.mutex.Unlock()
 	if a.connectionID > 0xff000000 || a.connectionID == 0 {
 		rand.Read(a.clientID[:])
-		a.connectionID = rand.Uint32() & 0xffffff
+		a.connectionID = mathRand.Uint32() & 0xffffff
 	}
 	a.connectionID++
 	copy(r.clientID[:], a.clientID[:])

transport/vmess/conn.go

@@ -6,22 +6,19 @@ import (
 	"crypto/cipher"
 	"crypto/hmac"
 	"crypto/md5"
+	"crypto/rand"
 	"crypto/sha256"
 	"encoding/binary"
 	"errors"
 	"hash/fnv"
 	"io"
-	"math/rand"
+	mathRand "math/rand"
 	"net"
 	"time"
 
 	"golang.org/x/crypto/chacha20poly1305"
 )
 
-func init() {
-	rand.Seed(time.Now().UnixNano())
-}
-
 // Conn wrapper a net.Conn with vmess protocol
 type Conn struct {
 	net.Conn
@@ -77,7 +74,7 @@ func (vc *Conn) sendRequest() error {
 	buf.WriteByte(vc.respV)
 	buf.WriteByte(vc.option)
 
-	p := rand.Intn(16)
+	p := mathRand.Intn(16)
 	// P Sec Reserve Cmd
 	buf.WriteByte(byte(p<<4) | byte(vc.security))
 	buf.WriteByte(0)