Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- char *
- __sha256_crypt_r (key, salt, buffer, buflen)
- const char *key;
- const char *salt;
- char *buffer;
- int buflen;
- {
- ....
- unsigned char temp_result[32]
- ....
- memset (temp_result, '\0', sizeof (temp_result));
- ....
- }
- This suspicious code was found in glibc project by PVS-Studio static code analyzer.
- Warning message is:
- V597 The compiler could delete the 'memset' function call, which is used to flush 'temp_result' buffer. The RtlSecureZeroMemory() function should be used to erase the private data. sha256-crypt.c 385
- PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/
Advertisement
Add Comment
Please, Sign In to add comment