void/ZeroTierOne
2
0
Fork 0
mirror of https://github.com/zerotier/ZeroTierOne.git synced 2025-06-05 20:13:44 +02:00
Code Issues Projects Releases Packages Wiki Activity Actions

Yes, zero my secret key data. Yes I really, really mean it.

Browse source
This commit is contained in:
Adam Ierymenko 2014-10-02 09:08:31 -07:00
parent 28646eee0a
commit e8c5495b61
2 changed files with 19 additions and 11 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

16
node/Utils.cpp
View file

@ -78,6 +78,22 @@ bool Utils::redirectUnixOutputs(const char *stdoutPath,const char *stderrPath)
} }
#endif // __UNIX_LIKE__ #endif // __UNIX_LIKE__
static void _Utils_doBurn(char *ptr,unsigned int len)
{
for(unsigned int i=0;i<len;++i)
ptr[i] = (char)0;
}
void (*volatile _Utils_doBurn_ptr)(char *,unsigned int) = _Utils_doBurn;
void Utils::burn(void *ptr,unsigned int len)
throw()
{
// Ridiculous hack: call _doBurn() via a volatile function pointer to
// hold down compiler optimizers and beat them mercilessly until they
// cry and mumble something about never eliding secure memory zeroing
// again.
(_Utils_doBurn_ptr)((char *)ptr,len);
}
std::map<std::string,bool> Utils::listDirectory(const char *path) std::map<std::string,bool> Utils::listDirectory(const char *path)
{ {
std::map<std::string,bool> r; std::map<std::string,bool> r;

14
node/Utils.hpp
View file

@ -101,18 +101,10 @@ public:
} }
/** /**
* Securely zero memory * Securely zero memory, avoiding compiler optimizations and such
*
* This just uses volatile to ensure that it's never optimized out.
*/ */
static inline void burn(void *ptr,unsigned int len) static void burn(void *ptr,unsigned int len)
throw() throw();
{
volatile unsigned char *p = (unsigned char *)ptr;
volatile unsigned char *e = p + len;
while (p != e)
*(p++) = (unsigned char)0;
}
/** /**
* Delete a file * Delete a file