Am 29.11.16 um 09:20 schrieb Steffan Karger: > Hi, > > On 29-11-16 00:00, Zhaomo Yang wrote: >> Just wanted to let you know that we have a new implementation of >> secure_memzero.h, which is available at >> https://compsec.sysnet.ucsd.edu/secure_memzero.h >> <https://compsec.sysnet.ucsd.edu/secure_memzero.h>. >> >> The version I sent to you guys has a minor issue in dealing with >> memset_s. Also, this implementation synthesizes most of the existing >> working solutions for this problem. It allows you to specify, via >> macros, which implementation you prefer. This will let users override >> our defaults, if they want. > Thanks, but I think I prefer the more light-weight approach you sent > earlier (slightly molded to use static inline wrapper functions instead > of macro's). It does what it needs to do for us, and is sufficiently > small to easily integrate into existing code. > > And thanks again for notifying us (on security@) on your findings. > I think we should prefer memset_s if available since it is a C11 standard.
Arne ------------------------------------------------------------------------------ _______________________________________________ Openvpn-devel mailing list Openvpn-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/openvpn-devel
