mirror of
https://github.com/curl/curl.git
synced 2026-05-16 21:46:20 +03:00
066478f634
To safely zero memory, introduce `curlx_memzero()`, and map it to `memset_s()` (C11) or `memset_explicit()` (C23) if auto-detected, or `explicit_bzero()` or `explicit_memset()` for platforms opted-in, or fall back to a local workaround if all unavailable. On Windows, always use `SecureZeroMemory()`, or `SecureZeroMemory2()` with Visual Studio and Windows SDK 10.0.26100.0+. Details above are experimental and may change if they cause issues. Also add macros/functions that zero memory before freeing a buffer: - `curlx_safefreezero()`: for buffers with size. - `curlx_safefreezeroz()`: for null-terminated buffers. - `curlx_freezero()`: for buffers with size. - `curlx_freezeroz()`: for null-terminated buffers. `curlx_memzero()` must not be passed a NULL pointer because in some implementations it is undefined behavior. Also: - curl_sha512_256: Replace hard-wired `explicit_memset()` call with new `curlx_memzero()`. Refs: https://en.cppreference.com/c/string/byte/memset https://man7.org/linux/man-pages/man3/explicit_bzero.3.html https://man.freebsd.org/cgi/man.cgi?query=explicit_bzero https://man.netbsd.org/NetBSD-7.2/explicit_memset.3 https://learn.microsoft.com/previous-versions/windows/desktop/legacy/aa366877(v=vs.85) https://learn.microsoft.com/windows/win32/memory/winbase-securezeromemory2 https://learn.microsoft.com/cpp/overview/compiler-versions https://learn.microsoft.com/windows/apps/windows-sdk/downloads https://jtsoya539.github.io/windows-sdk-versions/ Credits-to: Daniel Gustafsson Credits-to: Will Cosgrove and co-authors in libssh2 Ref: #13589 (original attempt) Ref: #21588 Closes #21598 |
||
|---|---|---|
| .. | ||
| .gitignore | ||
| curl-amissl.m4 | ||
| curl-apple-sectrust.m4 | ||
| curl-compilers.m4 | ||
| curl-confopts.m4 | ||
| curl-functions.m4 | ||
| curl-gnutls.m4 | ||
| curl-mbedtls.m4 | ||
| curl-openssl.m4 | ||
| curl-override.m4 | ||
| curl-reentrant.m4 | ||
| curl-rustls.m4 | ||
| curl-schannel.m4 | ||
| curl-sysconfig.m4 | ||
| curl-wolfssl.m4 | ||
| xc-am-iface.m4 | ||
| xc-cc-check.m4 | ||
| xc-lt-iface.m4 | ||
| xc-val-flgs.m4 | ||
| zz40-xc-ovr.m4 | ||
| zz50-xc-ovr.m4 | ||