John Moffett 00a0861181 Pass all characters to SecureString including nulls ...

`SecureString` is a `std::string` specialization with
a secure allocator. However, it's treated like a C-
string (no explicit length and null-terminated). This
can cause unexpected behavior. For instance, if a user
enters a passphrase with an embedded null character
(which is possible through Qt and the JSON-RPC), it will
ignore any characters after the null, giving the user
a false sense of security.

Instead of assigning `SecureString` via `std::string::c_str()`,
assign it via a `std::string_view` of the original. This
explicitly captures the size and doesn't make any extraneous
copies in memory.

2023-02-21 14:40:59 -05:00

..

secure.h

Pass all characters to SecureString including nulls

2023-02-21 14:40:59 -05:00

zeroafterfree.h

scripted-diff: Bump copyright headers

2022-12-24 23:49:50 +00:00