mirror of
https://gitlab.com/libvirt/libvirt.git
synced 2024-08-28 11:31:16 +00:00
util: Introduce virsecureerase module
The module will provide functions for disposing secrets stored in memory. Note that for now it's implemented using memset, which is not really secure. Signed-off-by: Peter Krempa <pkrempa@redhat.com> Reviewed-by: Daniel P. Berrangé <berrange@redhat.com>
This commit is contained in:
parent
5761f8ab54
commit
43696418af
@ -3175,6 +3175,10 @@ virSecretLookupFormatSecret;
|
||||
virSecretLookupParseSecret;
|
||||
|
||||
|
||||
# util/virsecureerase.h
|
||||
virSecureErase;
|
||||
|
||||
|
||||
# util/virsocket.h
|
||||
virSocketRecvFD;
|
||||
virSocketSendFD;
|
||||
|
@ -86,6 +86,7 @@ util_sources = [
|
||||
'virscsivhost.c',
|
||||
'virseclabel.c',
|
||||
'virsecret.c',
|
||||
'virsecureerase.c',
|
||||
'virsocket.c',
|
||||
'virsocketaddr.c',
|
||||
'virstoragefile.c',
|
||||
|
44
src/util/virsecureerase.c
Normal file
44
src/util/virsecureerase.c
Normal file
@ -0,0 +1,44 @@
|
||||
/*
|
||||
* virsecureerase.c: Secure clearing of memory
|
||||
*
|
||||
* This library is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the GNU Lesser General Public
|
||||
* License as published by the Free Software Foundation; either
|
||||
* version 2.1 of the License, or (at your option) any later version.
|
||||
*
|
||||
* This library is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
* Lesser General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Lesser General Public
|
||||
* License along with this library. If not, see
|
||||
* <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
*/
|
||||
|
||||
#include <config.h>
|
||||
|
||||
#include "virsecureerase.h"
|
||||
|
||||
/**
|
||||
* virSecureErase:
|
||||
* @ptr: pointer to memory to clear
|
||||
* @size: size of memory to clear
|
||||
*
|
||||
* Clear @size bytes of memory at @ptr.
|
||||
*
|
||||
* Note that for now this is implemented using memset which is not secure as
|
||||
* it can be optimized out.
|
||||
*
|
||||
* Also note that there are possible leftover direct uses of memset.
|
||||
*/
|
||||
void
|
||||
virSecureErase(void *ptr,
|
||||
size_t size)
|
||||
{
|
||||
if (!ptr || size == 0)
|
||||
return;
|
||||
|
||||
memset(ptr, 0, size);
|
||||
}
|
25
src/util/virsecureerase.h
Normal file
25
src/util/virsecureerase.h
Normal file
@ -0,0 +1,25 @@
|
||||
/*
|
||||
* virsecureerase.h: Secure clearing of memory
|
||||
*
|
||||
* This library is free software; you can redistribute it and/or
|
||||
* modify it under the terms of the GNU Lesser General Public
|
||||
* License as published by the Free Software Foundation; either
|
||||
* version 2.1 of the License, or (at your option) any later version.
|
||||
*
|
||||
* This library is distributed in the hope that it will be useful,
|
||||
* but WITHOUT ANY WARRANTY; without even the implied warranty of
|
||||
* MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
|
||||
* Lesser General Public License for more details.
|
||||
*
|
||||
* You should have received a copy of the GNU Lesser General Public
|
||||
* License along with this library. If not, see
|
||||
* <http://www.gnu.org/licenses/>.
|
||||
*
|
||||
*/
|
||||
|
||||
#pragma once
|
||||
|
||||
#include "internal.h"
|
||||
|
||||
void
|
||||
virSecureErase(void *ptr, size_t size);
|
Loading…
Reference in New Issue
Block a user