Use explicit_bzero
Peter Eisentraut <peter@eisentraut.org>
Use explicit_bzero Use the explicit_bzero() function in places where it is important that security information such as passwords is cleared from memory. There might be other places where it could be useful; this is just an initial collection. For platforms that don't have explicit_bzero(), provide various fallback implementations. (explicit_bzero() itself isn't standard, but as Linux/glibc, FreeBSD, and OpenBSD have it, it's the most common spelling, so it makes sense to make that the invocation point.) Discussion: https://www.postgresql.org/message-id/flat/42d26bde-5d5b-c90d-87ae-6cab875f73be%402ndquadrant.com
Files
| Path | Change | +/− |
|---|---|---|
| configure | modified | +14 −1 |
| configure.in | modified | +2 −0 |
| src/backend/libpq/be-secure-common.c | modified | +3 −0 |
| src/include/pg_config.h.in | modified | +6 −0 |
| src/include/pg_config.h.win32 | modified | +6 −0 |
| src/include/port.h | modified | +4 −0 |
| src/interfaces/libpq/fe-connect.c | modified | +8 −0 |
| src/port/explicit_bzero.c | added | +55 −0 |
| src/tools/msvc/Mkvcbuild.pm | modified | +1 −1 |
Discussion
- using explicit_bzero 35 messages · 2019-06-21 → 2019-09-17