Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- SECStatus
- SHA384_HashBuf(unsigned char *dest, const unsigned char *src,
- PRUint32 src_length)
- {
- SHA512Context ctx;
- unsigned int outLen;
- SHA384_Begin(&ctx);
- SHA512_Update(&ctx, src, src_length);
- SHA512_End(&ctx, dest, &outLen, SHA384_LENGTH);
- memset(&ctx, 0, sizeof ctx);
- return SECSuccess;
- }
- This suspicious code was found in NSS project by PVS-Studio static code analyzer.
- Warning message is:
- V597 The compiler could delete the 'memset' function call, which is used to flush 'ctx' object. The RtlSecureZeroMemory() function should be used to erase the private data. sha512.c 1423
- PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/
Advertisement
Add Comment
Please, Sign In to add comment