--- scanssh-2.1/arc4random.c
+++ scanssh-2.1/arc4random.c
@@ -1,8 +1,11 @@
+#ifdef HAVE_CONFIG_H
+#include "config.h"
+#endif
+
 #include <sys/types.h>
+#include <time.h>
 #include <stdlib.h>
 
-#include "config.h"
-
 /*
  * For those poor operating systems, that do not have a PRNG in their
  * libc.  We do not require cryptographic random numbers for this
--- scanssh-2.1/md5.c
+++ scanssh-2.1/md5.c
@@ -23,12 +23,12 @@
    copyright in any changes I have made; this code remains in the
    public domain.  */
 
-#include <sys/types.h>
-
 #ifdef HAVE_CONFIG_H
 #include "config.h"
 #endif
 
+#include <sys/types.h>
+#include <string.h>
 #include "md5.h"
 
 /* Little-endian byte-swapping routines.  Note that these do not