mirror/mbedtls
1
0
Fork 0
mirror of https://github.com/Mbed-TLS/mbedtls.git synced 2025-01-29 21:33:02 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

Add more protection to mbedtls_platform_zeroize

Browse Source 
Signed-off-by: Dave Rodgman <dave.rodgman@arm.com>
This commit is contained in:
Dave Rodgman 2023-08-31 15:19:38 +01:00
parent 6147511bc0
commit ac3cf7c20b
1 changed files with 9 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

9
library/platform_util.c
View File

@ -125,6 +125,15 @@ void mbedtls_platform_zeroize(void *buf, size_t len)
SecureZeroMemory(buf, len);
#else
memset_func(buf, 0, len);
#endif
#if defined(__GNUC__)
/* For clang and gcc, pretend that we have some assembly that reads the
* zero'd memory as an additional protection against being optimised away. */
#pragma clang diagnostic push
#pragma clang diagnostic ignored "-Wvla"
asm volatile ("" : : "m" (*(char (*)[len]) buf) : );
#pragma clang diagnostic pop
#endif
}
}