Yes, zero my secret key data. Yes I really, really mean it.

This commit is contained in:
Adam Ierymenko 2014-10-02 09:08:31 -07:00
parent 28646eee0a
commit e8c5495b61
2 changed files with 19 additions and 11 deletions

View File

@ -78,6 +78,22 @@ bool Utils::redirectUnixOutputs(const char *stdoutPath,const char *stderrPath)
}
#endif // __UNIX_LIKE__
static void _Utils_doBurn(char *ptr,unsigned int len)
{
for(unsigned int i=0;i<len;++i)
ptr[i] = (char)0;
}
void (*volatile _Utils_doBurn_ptr)(char *,unsigned int) = _Utils_doBurn;
void Utils::burn(void *ptr,unsigned int len)
throw()
{
// Ridiculous hack: call _doBurn() via a volatile function pointer to
// hold down compiler optimizers and beat them mercilessly until they
// cry and mumble something about never eliding secure memory zeroing
// again.
(_Utils_doBurn_ptr)((char *)ptr,len);
}
std::map<std::string,bool> Utils::listDirectory(const char *path)
{
std::map<std::string,bool> r;

View File

@ -101,18 +101,10 @@ public:
}
/**
* Securely zero memory
*
* This just uses volatile to ensure that it's never optimized out.
* Securely zero memory, avoiding compiler optimizations and such
*/
static inline void burn(void *ptr,unsigned int len)
throw()
{
volatile unsigned char *p = (unsigned char *)ptr;
volatile unsigned char *e = p + len;
while (p != e)
*(p++) = (unsigned char)0;
}
static void burn(void *ptr,unsigned int len)
throw();
/**
* Delete a file