[PATCH] crypto: memzero_explicit - make sure to clear out sensitive data

2014-09-07 Thread Daniel Borkmann
Recently, in commit 13aa93c70e71 (random: add and use memzero_explicit() for clearing data), we have found that GCC may optimize some memset() cases away when it detects a stack variable is not being used anymore and going out of scope. This can happen, for example, in cases when we are clearing

Re: [PATCH] crypto: memzero_explicit - make sure to clear out sensitive data

2014-09-07 Thread Daniel Borkmann
Hi Milan, On 09/07/2014 07:15 PM, Milan Broz wrote: On 09/07/2014 06:46 PM, Daniel Borkmann wrote: Recently, in commit 13aa93c70e71 (random: add and use memzero_explicit() for clearing data), we have found that GCC may optimize some memset() cases away when it detects a stack variable is not