[PATCH 0/3] explicit_bzero v5

[Paul Eggert]

On 11/15/2016 10:54 AM, Zack Weinberg wrote:
> If the adversary can read the stack at all, I suspect they've already
> won, no matter what we do.

That will likely be true in many applications, but not in all. It's 
worth documenting the issue for applications that put sensitive objects 
in the heap, as they might not expose these object addresses to the 
stack now, but could do so if modified to invoke explicit_bzero.