I echo what someone said earlier on another OpenSSL thread: security applications should not be handling their own memory at a low level like this. It's just to

I echo what someone said earlier on another OpenSSL thread: security applications should not be handling their own memory at a low level like this. It's just too easy to mess up, and it often leads to the worst vulnerabilities.