1
0
Fork 0
mirror of git://git.gnupg.org/gnupg.git synced 2025-07-02 22:46:30 +02:00

* build-packet.c (do_plaintext), encode.c (encode_sesskey, encode_simple,

encode_crypt), sign.c (write_plaintext_packet): Use wipememory() instead
of memset() to wipe sensitive memory as the memset() might be optimized
away.
This commit is contained in:
David Shaw 2002-10-31 15:40:42 +00:00
parent d284a4d200
commit 20c99d180a
4 changed files with 12 additions and 5 deletions

View file

@ -98,7 +98,7 @@ encode_sesskey( DEK *dek, DEK **ret_dek, byte *enckey )
cipher_close( hd );
memcpy( enckey, buf, c->keylen + 1 );
memset( buf, 0, sizeof buf ); /* burn key */
wipememory( buf, sizeof buf ); /* burn key */
*ret_dek = c;
}
@ -350,7 +350,7 @@ encode_simple( const char *filename, int mode, int compat )
log_error("copying input to output failed: %s\n", g10_errstr(rc) );
break;
}
memset(copy_buffer, 0, 4096); /* burn buffer */
wipememory(copy_buffer, 4096); /* burn buffer */
}
/* finish the stuff */
@ -589,7 +589,7 @@ encode_crypt( const char *filename, STRLIST remusr )
g10_errstr(rc) );
break;
}
memset(copy_buffer, 0, 4096); /* burn buffer */
wipememory(copy_buffer, 4096); /* burn buffer */
}
/* finish the stuff */