[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: ssh_string_burn guarantees?


Thanks for the quick turnaround!

On 09/15/2014 11:46 AM, Andreas Schneider wrote:
> On Monday 15 September 2014 08:16:27 William Orr wrote:
>> Hey,
> 
> Hi,
>  
>> I was looking through the source of ssh_string_burn, and I was wondering
>> what guarantees there were to ensure it doesn't get optimized out.
>>
>> Now, the new C11 memset_s(3) can be used to make those guarantees on
>> platforms that have a new enough libc. Other platforms offer an
>> explicit_bzero(3) function with that guarantee.
> 
> thanks for bringing this up! Fixed with the latest commit to the master and 
> 0.6 branch.
> 
> 
> 	-- andreas
> 

Attachment: signature.asc
Description: OpenPGP digital signature


References:
ssh_string_burn guarantees?William Orr <will@xxxxxxxxxxxx>
Re: ssh_string_burn guarantees?Andreas Schneider <asn@xxxxxxxxxxxxxx>
Archive administrator: postmaster@lists.cynapses.org