[tor-bugs] #5137 [Obfsproxy]: crypt_free() might not zero enough?

[Tor Bug Tracker & Wiki]

#5137: crypt_free() might not zero enough?
-----------------------+----------------------------------------------------
 Reporter:  Sebastian  |          Owner:  asn         
     Type:  defect     |         Status:  needs_review
 Priority:  normal     |      Milestone:              
Component:  Obfsproxy  |        Version:              
 Keywords:             |         Parent:              
   Points:             |   Actualpoints:              
-----------------------+----------------------------------------------------
Changes (by Sebastian):

  * status:  new => needs_review


Comment:

 Branch bug5137 in my repository has the fix.

 ioerror points out that just zeroing might not be enough as the compiler
 could optimize that out, we'd need to overwrite it with stuff and then do
 something with it. But that seems like a more general thing, that could
 also affect tor?

-- 
Ticket URL: <https://trac.torproject.org/projects/tor/ticket/5137#comment:1>
Tor Bug Tracker & Wiki <https://trac.torproject.org/>
The Tor Project: anonymity online