[PATCH 0/3] explicit_bzero v5
Paul Eggert
eggert@cs.ucla.edu
Tue Nov 15 16:20:00 GMT 2016
On 11/15/2016 07:55 AM, Zack Weinberg wrote:
> Paul Eggert also observed that a call to explicit_bzero might expose
> the_address_ of a buffer containing sensitive data, and perhaps
> another thread could exfiltrate the data before it was erased.
> I thought about it and I have concluded that this, like the other
> remaining problems with this API, needs to be addressed in the
> compiler
That sounds reasonable. Could you please document this, though? Perhaps
something like the following, after the paragraph about copying objects?
@strong{Warning:} Calling @code{explicit_bzero} may expose
the object's address to other parts of the program, defeating
address space layout randomization.
More information about the Libc-alpha
mailing list