Re: De Raadt + FBSD + OpenSSH + hole?

看板FB_security作者時間11年前 (2014/04/21 10:32), 編輯推噓0(000)
留言0則, 0人參與, 最新討論串17/29 (看更多)
RW <rwmaillists@googlemail.com> wrote: > It can return the physical memory, but there are a couple of caveats. > Firstly, it can only return whole pages. Secondly, it's not returned > instantaneously to avoid the overhead of page-faults and zeroing pages > if that region is remalloced. It's left to the page-daemon to recover > the physical memory in its own time, and it remains readable by it's > previous process until it's reassigned. Again, thanks for clearing that up for me. I wasn't all that far off-base after all, but yours and Nathans replies make sense! So there is a real world use for calloc after all! (though only as a bug catching security measure - no sane program should ever read its memory it hasn't yet written to!) cheers, jamie _______________________________________________ freebsd-security@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-security To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
文章代碼(AID): #1JL8CZn9 (FB_security)
討論串 (同標題文章)
文章代碼(AID): #1JL8CZn9 (FB_security)