Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Vuln Dev
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Software leaves encryption keys, passwords lying around inmemory Oct 31 2002 04:56PM
Frank Knobbe (fknobbe knobbeits com)
On Wed, 2002-10-30 at 10:11, Peter Gutmann wrote:
> When compiled with any level of optimisation using gcc, the key clearing call
> goes away because of dead code elimination (see the MSDN article for more
> details on this, which uses VC++ to get the same effect). While you can
> kludge enough stu...

[ more ]  





 

Privacy Statement
Copyright 2009, SecurityFocus