correct usage of rand_r()