Call explicit_bzero where available

XMLWordPrintableJSON

    • Type: Improvement
    • Resolution: Fixed
    • Priority: Major - P3
    • 4.7.0
    • Affects Version/s: None
    • Component/s: None
    • None
    • Fully Compatible
    • Security 2020-04-20
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      explicit_bzero was added to GLIBC 2.25+, FreeBSD 11.0+, and OpenBSD 5.5+. MongoDB should use it if available on platforms that support it instead of the for loop in secure_zero_memory.cpp.

      For more information, see https://www.gnu.org/software/libc/manual/html_node/Erasing-Sensitive-Data.html

            Assignee:
            Mark Benvenuto
            Reporter:
            Mark Benvenuto
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

              Created:
              Updated:
              Resolved: