Bodo Moeller <[EMAIL PROTECTED]> writes: >On Sun, Dec 09, 2007 at 07:16:22PM +1300, Peter Gutmann wrote: >> There was a discussion on this list a year or two back about problems in >> using >> memset() to zeroise in-memory data, specifically the fact that optimising >> compilers would remove a memset() on (apparently) dead data in the belief >> that >> it wasn't serving any purpose. > >Actually this problem was discussed five years ago (October 2002) on the >vuln-dev mailing list:
When I said "a year or two" I meant for large values of two. Peter. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to [EMAIL PROTECTED]
