Home GnuPG

Wipe the context before releasing as an extra safeguard.
b5cbf11cceceUnpublished

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

Description

Wipe the context before releasing as an extra safeguard.

* src/assuan-defs.h (wipememory2, wipememory): New.  Taken from GnuPG.
* src/assuan.c (assuan_release): Wipe the context.

The assuan context has buffers which may carry senitive information.
These buffers could be wiped out with each flush but that is too
expensive. Thus we only wipe them when freeing the context.

  • Signed-off-by: Werner Koch <wk@gnupg.org>

Details

Provenance
wernerAuthored on Aug 7 2015, 11:26 AM
Parents
rA87def94c86d5: Add assuan_sock_set_flag and assuan_sock_get_flag.
Branches
Unknown
Tags
Unknown

Event Timeline