Hi Christophe, On Fri, Jun 15, 2018 at 11:17 AM, Christophe JAILLET <christophe.jail...@wanadoo.fr> wrote: > > any plan/interrest in having apr_crypto_memzero() available even if > APU_HAVE_CRYPTO is not defined? > There are a few places in httpd and in APR that should use this safer > memset'ing.
Agreed, apr_crypto_memzero() and apr_crypto_equals() could not depend on APU_HAVE_CRYPTO, though still defined/implemented in apr_crypto.h/c. Unfortunately this was made so in APR-1.6, but from 1.7 I'm +1. Thanks for noticing! Yann.
