4 ms·
Unless your web server makes SSH connections from some kind of in-process application, why would this bug allow SSH keys to leak?
by jbg_ 13y ago
Unless your web server makes SSH connections from some kind of in-process application, why would this bug allow SSH keys to leak?
- jevinskie 13y agoIs memory wiped with zeros by malloc/free in libc or in the kernel? If not, you're at risk.
- bzbarsky 13y agoYes, it is. Leaking memory contents across processes would be a pretty serious bug in the kernel. So when your process asks the kernel for memory (via sbrk or mmap) the memory it gets is zeroed out.