Antoine Pitrou created ARROW-16202:
--------------------------------------
Summary: [C++][Parquet] WipeOutDecryptionKeys doesn't securely
wipe out keys
Key: ARROW-16202
URL: https://issues.apache.org/jira/browse/ARROW-16202
Project: Apache Arrow
Issue Type: Bug
Components: C++, Parquet
Affects Versions: 7.0.0
Reporter: Antoine Pitrou
Fix For: 8.0.0
{{InternalFileDecryptor::WipeOutDecryptionKeys()}} merely call
{{std::string::clear}} to dispose of the decryption key contents, but that
method is not guaranteed to clear memory (it probably doesn't, actually).
We should probably devise a portable wrapper function for the various
OS-specific memory clearing utilities.
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
