Christopher Kings-Lynne wrote:

>Hi guys,
>
>Just a thought - do we explicitly wipe password strings from RAM after using
>them?
>
>I just read an article (by MS in fact) that illustrates a cute problem.
>Imagine you memset the password to zeros after using it.  There is a good
>chance that the compiler will simply remove the memset from the object code
>as it will seem like it can be optimised away...
>
>Just wondering...
>
>Chris
>  
>
Could you post that link? That seems wrong, an explicit memset certainly 
changes the operation of the code, and thus should not be optimized away.

>  
>

In response to

• Password security question at 2002-12-17 02:07:55 from Christopher Kings-Lynne

Responses

• Re: Password security question at 2002-12-17 17:00:19 from Greg Copeland

pgsql-hackers by date

Next:	From: Greg Copeland	Date: 2002-12-17 17:00:19
	Subject: Re: Password security question
Previous:	From: mlw	Date: 2002-12-17 13:02:34
	Subject: Re: Suggestion; "WITH VACUUM" option

pgsql-committers by date

Next:	From: Greg Copeland	Date: 2002-12-17 17:00:19
	Subject: Re: Password security question
Previous:	From: Tom Lane	Date: 2002-12-17 15:51:59
	Subject: pgsql-server/src/backend/executor spi.c