Philip Kaufmann 0f8a647782 don't use memset() in privacy/security relevant code parts ...

As memset() can be optimized out by a compiler it should not be used in
privacy/security relevant code parts. OpenSSL provides the safe
OPENSSL_cleanse() function in crypto.h, which perfectly does the job of
clean and overwrite data.

For details see: http://www.viva64.com/en/b/0178/

- change memset() to OPENSSL_cleanse() where appropriate
- change a hard-coded number from netbase.cpp into a sizeof()

2012-11-09 12:53:53 +01:00

3.8 KiB

Raw Blame History

View Raw