Re: OpenSSL wrapper vs Pike's SSL (Was: Bz2)

I would rather like to see something similar to the weak-flag on mappings. Perhaps a secure-free-flag on all objects which causes the memory to be freed and zeroed as soon as the refcount goes to 0.

/ Marcus Agehall (Trådlös)

Previous text:

2003-01-28 14:53: Subject: Re: OpenSSL wrapper vs Pike's SSL (Was: Bz2)

---

I don't really see clering out the key as an important weak point. You should do that in languages where you dont't have automatic memory management, but in Pike used memory contents doesn't accidently end up in paddings and similar. We could of course add code that clears memory that is freed (perhaps if the macro PIKE_SECURITY is defined) to protect it from other programs.

/ Martin Nilsson (Åskblod)