4 ms·
> No malloc(). ...by having your own arena allocator! I do agree that it is quite doable in this particular case, but I always remember that a custom memory al
by lifthrasiir 8y ago
> No malloc().
...by having your own arena allocator! I do agree that it is quite doable in this particular case, but I always remember that a custom memory allocator of OpenSSL made Heartbleed much more devastating.
- spc476 8y ago... of memory passed in by the user! So it's up to the caller to make sure memory contains unclassified information.