*   Fixes a crash due to erroneous `StatusOr`
    ([CVE-2022-23590](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23590))
*   Fixes multiple crashes and heap OOB accesses in TFG dialect (MLIR)
    ([CVE-2022-23594](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-23594))
*   Fixes a segfault in `simplifyBroadcast` (MLIR)

that is accessed between samples by the entropy // source to expose it to memory access timings. // // We reuse it and share it between Seed calls to avoid the significant (~500µs) // cost of zeroing a new allocation every time. The entropy source accesses it // using atomics (and doesn't care about its contents). // // It should end up in the .noptrbss section, and become backed by physical pages // at first use. This ensures that programs that do not use the FIPS 140-3 module // do not incur any...