Konstantin Belousov <kostik...@gmail.com> wrote:

> On Fri, Jan 18, 2013 at 01:50:52PM +0400, Andrey Zonov wrote:
> > The code that you copy/pasted is under HAVE_BROKEN_MLOCK.
> > 
> > The code that is executed on my machine is:
> > 
> > gnupg-1.4.13/util/secmem.c:
> > 167 #else
> > 168     err = mlock( p, n );
> > 169     if( err && errno )
> > 170         err = errno;
> > 171 #endif
> > 
> > and it works without errors.
> > 
> > I do not have HAVE_BROKEN_MLOCK in my config.h:
> > 
> > /usr/ports/security/gnupg1/work/gnupg-1.4.13/config.h:/* #undef
> > HAVE_BROKEN_MLOCK */
> > 
> > Try to recompile gnupg and check whether HAVE_BROKEN_MLOCK is defined.

I already tried that but still get the HAVE_BROKEN_MLOCK code path
which makes sense given that mlock() currently doesn't seem to work
on my system.

> FWIW, I use gnupg2 and it stopped complaining about 'using insecure memory'
> without recompilation.

Interesting, I guess there's something wrong with my system then.
I may try to track the problem down in the future, but as I don't
really need mlock() for gpg it's not particular high on my list.

Fabian

Attachment: signature.asc
Description: PGP signature

Reply via email to