Bug 1663503

Summary:	krb5: improve memset scrubbing
Product:	Red Hat Enterprise Linux 8	Reporter:	Robbie Harwood <rharwood>
Component:	krb5	Assignee:	Robbie Harwood <rharwood>
Status:	CLOSED ERRATA	QA Contact:	Filip Dvorak <fdvorak>
Severity:	unspecified	Docs Contact:
Priority:	high
Version:	8.1	CC:	dpal, pkis
Target Milestone:	rc	Flags:	pm-rhel: mirror+
Target Release:	8.1
Hardware:	Unspecified
OS:	Unspecified
URL:	https://github.com/krb5/krb5/pull/886
Whiteboard:
Fixed In Version:	krb5-1.17-2.el8	Doc Type:	Enhancement
Doc Text:	Feature: Minor improvements to memset() of sensitive memory Reason: Static analysis uncovered an issue where gcc would optimize out some calls. Result: We have an answer to anyone who watched that one CCC talk.	Story Points:	---
Clone Of:
Clones:	1663506 (view as bug list)		Environment:
Last Closed:	2019-11-05 21:29:55 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	1682282
Bug Blocks:	1663506, 1701002

Description Robbie Harwood 2019-01-04 16:00:12 UTC

At C3 this year, a talk ( https://media.ccc.de/v/35c3-9788-memsad ) highlighted that memset for clearing sensitive data remains a problem for projects.  While they were more alarmist than appropriate regarding krb5 (especially on standard Linux environments), there are a couple improvements that can be made - and they'll make static analyzers happier too.

Comment 6 errata-xmlrpc 2019-11-05 21:29:55 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:3516