Re: svn commit: r1832415 - /apr/apr/trunk/crypto/apr_md4.c

2018-06-15 Thread Yann Ylavic
On Fri, Jun 15, 2018 at 12:46 PM, Yann Ylavic wrote: > > apr_crypto_{memzero,equals} => apr_consttime_{memzero,equals} I meant apr_crypto_memzero() => apr_explicit_memzero() and apr_crypto_equals() => apr_consttime_equals().

Re: svn commit: r1832415 - /apr/apr/trunk/crypto/apr_md4.c

2018-06-15 Thread Yann Ylavic
On Fri, Jun 15, 2018 at 12:41 PM, Yann Ylavic wrote: > Hi Christophe, > > On Fri, Jun 15, 2018 at 11:17 AM, Christophe JAILLET > wrote: >> >> any plan/interrest in having apr_crypto_memzero() available even if >> APU_HAVE_CRYPTO is not defined? >> There are a few places in httpd and in APR that

Re: svn commit: r1832415 - /apr/apr/trunk/crypto/apr_md4.c

2018-06-15 Thread Yann Ylavic
Hi Christophe, On Fri, Jun 15, 2018 at 11:17 AM, Christophe JAILLET wrote: > > any plan/interrest in having apr_crypto_memzero() available even if > APU_HAVE_CRYPTO is not defined? > There are a few places in httpd and in APR that should use this safer > memset'ing. Agreed, apr_crypto_memzero()

Re: svn commit: r1832415 - /apr/apr/trunk/crypto/apr_md4.c

2018-06-15 Thread Christophe JAILLET
Hi, any plan/interrest in having apr_crypto_memzero() available even if APU_HAVE_CRYPTO is not defined? There are a few places in httpd and in APR that should use this safer memset'ing. CJ Le 28/05/2018 à 21:45, jaillet...@apache.org a écrit : Author: jailletc36 Date: Mon May 28 19:45:56