Not a member of Pastebin yet?
Sign Up,
it unlocks many cool features!
- static inline void sha1ProcessChunk(
- Sha1State *state, const unsigned char *buffer)
- {
- ....
- quint8 chunkBuffer[64];
- ....
- #ifdef SHA1_WIPE_VARIABLES
- a = b = c = d = e = 0;
- memset(chunkBuffer, 0, 64);
- #endif
- }
- This suspicious code was found in QT project by PVS-Studio static code analyzer.
- Warning message is:
- V597 The compiler could delete the 'memset' function call, which is used to flush 'chunkBuffer' buffer. The RtlSecureZeroMemory() function should be used to erase the private data. sha1.cpp 191
- PVS-Studio is a static analyzer for detecting bugs in the source code of applications written in C, C++, C++11, C++/CX. Site: http://www.viva64.com/en/pvs-studio/
Advertisement
Add Comment
Please, Sign In to add comment