On Fri, Jun 15, 2018 at 12:46 PM, Yann Ylavic wrote:
>
> apr_crypto_{memzero,equals} => apr_consttime_{memzero,equals}
I meant apr_crypto_memzero() => apr_explicit_memzero() and
apr_crypto_equals() => apr_consttime_equals().
On Fri, Jun 15, 2018 at 12:41 PM, Yann Ylavic wrote:
> Hi Christophe,
>
> On Fri, Jun 15, 2018 at 11:17 AM, Christophe JAILLET
> wrote:
>>
>> any plan/interrest in having apr_crypto_memzero() available even if
>> APU_HAVE_CRYPTO is not defined?
>> There are a few places in httpd and in APR that s
Hi Christophe,
On Fri, Jun 15, 2018 at 11:17 AM, Christophe JAILLET
wrote:
>
> any plan/interrest in having apr_crypto_memzero() available even if
> APU_HAVE_CRYPTO is not defined?
> There are a few places in httpd and in APR that should use this safer
> memset'ing.
Agreed, apr_crypto_memzero()
Hi,
any plan/interrest in having apr_crypto_memzero() available even if
APU_HAVE_CRYPTO is not defined?
There are a few places in httpd and in APR that should use this safer
memset'ing.
CJ
Le 28/05/2018 à 21:45, jaillet...@apache.org a écrit :
Author: jailletc36
Date: Mon May 28 19:45:56 20
