3 ms·
And since people were able to recover SSL keys, does this not mean that this buffer was used for... everything? Having a non zeroing allocator for an entire lib
by MichaelGG 12y ago
And since people were able to recover SSL keys, does this not mean that this buffer was used for... everything? Having a non zeroing allocator for an entire library seems rather ambitious. It's significantly worse then just having a buffer pool for, say, incoming packets or something.
- akerl_ 12y agoOh yes, using buffers without zeroing them is a terrible idea, and sharing those buffers among different types of things is a terrible idea. I was specifically commenting on the fact that what the parent comment described as "terribly unlikely" is in fact what happened.