Messages in this thread | | | Subject | Re: [Patch 2.6] dm-crypt: zero key before freeing it | From | Arjan van de Ven <> | Date | Wed, 04 Jan 2006 21:09:39 +0100 |
| |
On Wed, 2006-01-04 at 21:08 +0100, Stefan Rompf wrote: > Hi Andrew, > > dm-crypt does not clear struct crypt_config before freeing it. Thus, > information on the key could leak f.e. to a swsusp image even after the > encrypted device has been removed. The attached patch against 2.6.14 / 2.6.15 > fixes it.
since a memset right before a free is a very unusual code pattern in the kernel it may well be worth putting a short comment around it to prevent someone later removing it as "optimization"
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
| |