[PATCH] explicit_bzero final

[Florian Weimer]

On 12/13/2016 12:06 AM, Zack Weinberg wrote:
> By exposing __glibc_read_memory to external callers, we can write
> a fortify wrapper for explicit_bzero in terms of __memset_chk and
> __glibc_read_memory.

I think this is quite wrong.

We already know that explicit_bzero will need special treatment from the 
compiler, but the above may hide the fortified version.

I need to talk to some GCC people to see if the above is just plain 
ugly, or something that can actively interfere with predictable 
properties of a fortified call to explicit_bzero.

Thanks,
Florian