Applied.
FYI, secure memory requires setuid, something most applications aren't
or shouldn't be.
2008-01-15 Simon Josefsson <[EMAIL PROTECTED]>
* lib/gc-libgcrypt.c (gc_init): Disable secure memory by default.
Applications that requires it should initialize libgcrypt
manually.
diff --git a/lib/gc-libgcrypt.c b/lib/gc-libgcrypt.c
index a147d44..bec7b76 100644
--- a/lib/gc-libgcrypt.c
+++ b/lib/gc-libgcrypt.c
@@ -1,5 +1,5 @@
/* gc-libgcrypt.c --- Crypto wrappers around Libgcrypt for GC.
- * Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007 Simon Josefsson
+ * Copyright (C) 2002, 2003, 2004, 2005, 2006, 2007, 2008 Simon Josefsson
*
* This file is free software; you can redistribute it and/or modify
* it under the terms of the GNU General Public License as published
@@ -46,6 +46,9 @@ gc_init (void)
err = gcry_control (GCRYCTL_ANY_INITIALIZATION_P);
if (err == GPG_ERR_NO_ERROR)
{
+ if (gcry_control (GCRYCTL_DISABLE_SECMEM, NULL, 0))
+ return GC_INIT_ERROR;
+
if (gcry_check_version (GCRYPT_VERSION) == NULL)
return GC_INIT_ERROR;