Home page logo

bugtraq logo Bugtraq mailing list archives

Re: When scrubbing secrets in memory doesn't work
From: "Perry E. Metzger" <perry () piermont com>
Date: 05 Nov 2002 18:58:58 -0500

"Michael Howard" <mikehow () microsoft com> writes:
On the surface, this looks fine, until you look at the ASM output, and
you see the call to memset has been removed by the optimizer because
szPwd is not read once the function completes. Hence, the secret data is
still floating in memory.

Thats why you have to declare such data volatile -- to prevent
optimizers from becoming too anxious to help.

Perry E. Metzger                perry () piermont com

  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]