Tag: 7185ad2672a7d50bc384de0e38d90b75d99f3d82

crypto: memzero_explicit – make sure to clear out sensitive data

Author: Daniel Borkmann <dborkman@redhat.com> Recently, in commit 13aa93c70e71 (“random: add and use memzero_explicit() for clearing data”), we have found that GCC may optimize some memset() cases away when it detects a stack variable is not being used anymore and going out of scope. This can happen, for example, in cases when we are clearing out …

Continue reading