--- curl-7.18.1/lib/formdata.c.bak	2008-03-30 12:00:51.000000000 +0300
+++ curl-7.18.1/lib/formdata.c	2008-06-04 14:04:43.158422813 +0300
@@ -1674,28 +1674,33 @@ void curl_formfree(struct curl_httppost 
  */
 char *Curl_FormBoundary(void)
 {
-  char *retstring;
-  static int randomizer;   /* this is just so that two boundaries within
-                              the same form won't be identical */
+  unsigned char *retstring;
   size_t i;
-
+  size_t ret;
   static const char table16[]="abcdef0123456789";
+  FILE *frandom;
 
-  retstring = (char *)malloc(BOUNDARY_LENGTH+1);
-
+  retstring = malloc(BOUNDARY_LENGTH+1);
   if(!retstring)
     return NULL; /* failed */
 
-  srand((unsigned int)time(NULL)+randomizer++); /* seed */
-
   strcpy(retstring, "----------------------------");
-
-  for(i=strlen(retstring); i<BOUNDARY_LENGTH; i++)
-    retstring[i] = table16[rand()%16];
-
-  /* 28 dashes and 12 hexadecimal digits makes 12^16 (184884258895036416)
-     combinations */
-  retstring[BOUNDARY_LENGTH]=0; /* zero terminate */
+  frandom = fopen("/dev/urandom", "rb");
+  if (!frandom) {
+    free(retstring);
+    return NULL;
+  }
+  setbuf(frandom, NULL);
+  i = strlen(retstring);
+  ret = fread(retstring + i, BOUNDARY_LENGTH - i, 1, frandom);
+  fclose(frandom);
+  if (ret != 1) {
+    free(retstring);
+    return NULL;
+  }
+  for(; i<BOUNDARY_LENGTH; i++)
+    retstring[i] = table16[retstring[i] % 16U];
+  retstring[i]=0; /* zero terminate */
 
   return retstring;
 }