Bug 90681
| Summary: | dm-crypt.c 708 the compiler could delete the 'memset' function call | ||
|---|---|---|---|
| Product: | Drivers | Reporter: | Arman (aa-c-aa) |
| Component: | Other | Assignee: | drivers_other |
| Status: | NEW --- | ||
| Severity: | normal | CC: | george.shuklin |
| Priority: | P1 | ||
| Hardware: | All | ||
| OS: | Linux | ||
| Kernel Version: | 3.18.1 | Subsystem: | |
| Regression: | No | Bisected commit-id: | |
there is no RtlSecureZeroMemory() I think the issue is not with alternative name, but the possible missoptimization of the memset call. And that one is sensitive... it's missoptimization : RtlSecureZeroMemory() alternative for linux must be used |
The compiler could delete the 'memset' function call, which is used to flush 'buf' buffer. The RtlSecureZeroMemory() function should be used to erase the private data. dm-crypt.c : 708 static int crypt_iv_tcw_whitening(....) { ... out: memset(buf, 0, sizeof(buf)); return r; } ...