Skip to content

Commit

Permalink
TODO: erase secrets from heap/stack after use
Browse files Browse the repository at this point in the history
Closes curl#7268
  • Loading branch information
bagder committed Aug 10, 2021
1 parent 16e9c8e commit cfe3667
Showing 1 changed file with 10 additions and 0 deletions.
10 changes: 10 additions & 0 deletions docs/TODO
Original file line number Diff line number Diff line change
Expand Up @@ -46,6 +46,7 @@
1.28 FD_CLOEXEC
1.29 Upgrade to websockets
1.30 config file parsing
1.31 erase secrets from heap/stack after use

2. libcurl - multi interface
2.1 More non-blocking
Expand Down Expand Up @@ -433,6 +434,15 @@

See https://github.com/curl/curl/issues/3698

1.31 erase secrets from heap/stack after use

Introducing a concept and system to erase secrets from memory after use, it
could help mitigate and lessen the impact of (future) security problems etc.
However: most secrets are passed to libcurl as clear text from the
application and then clearing them within the library adds nothing...

https://github.com/curl/curl/issues/7268

2. libcurl - multi interface

2.1 More non-blocking
Expand Down

0 comments on commit cfe3667

Please sign in to comment.