Re: A secure string library?

From: Julien Blanc (julien.blanc_at_[hidden])
Date: 2024-07-10 04:41:13

Le mardi 09 juillet 2024 Ã  22:14 +0200, Rainer Deyke via Boost a
écrit :
> So: is there any real attack in the wild that can be prevented by
> using a secure string class?
> 

I think the key here is that an attack is not "prevented", but
"mitigated". If the attacker has access to your memory, you already
have a problem. But if it contains a lot of sensitive data, it's even
worse.

Iirc heartblead was that kind of failure that would have been mitigated
if memory had been cleared correctly upon disposal.

Regards,

Julien