如何将buffer数据置0-memset函数有缺陷

最新推荐文章于 2023-06-14 21:18:54 发布

原创

最新推荐文章于 2023-06-14 21:18:54 发布 · 1.2k 阅读

0 ·

CC 4.0 BY-SA版权

本文探讨了在加密应用程序中，为何不能简单使用memset函数来清除敏感数据，并分析了编译器可能进行的优化。通过示例代码，解释了一种利用volatile函数指针确保内存清除的策略，以防止编译器优化。同时提到了Windows上的securezeroMemory和C11的memset_s作为安全的内存清除选项。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

最近看到mbedtls源码里面有段关于memset的代码，和我们平时使用方式不一样，特意看了下。

mbedtls的关于memset调用的源码如下：

#if !defined(MBEDTLS_PLATFORM_ZEROIZE_ALT)
/*
 * This implementation should never be optimized out by the compiler
 *
 * This implementation for mbedtls_platform_zeroize() was inspired from Colin
 * Percival's blog article at:
 *
 * http://www.daemonology.net/blog/2014-09-04-how-to-zero-a-buffer.html
 *
 * It uses a volatile function pointer to the standard memset(). Because the
 * pointer is volatile the compiler expects it to change at
 * any time and will not optimize out the call that could potentially perform
 * other operations on the input buffer instead of just setting it to 0.
 * Nevertheless, as pointed out by davidtgoldblatt on Hacker News
 * (refer to http://www.daemonology.net/blog/2014-09-05-erratum.html for
 * details), optimizations of the following form are still possible:
 *
 * if( memset_func != memset )
 *     memset_func( buf, 0, len );
 *
 * Note that it is extremely difficult to guarantee that
 * mbedtls_platform_zeroize() will not be optimized out by aggressive compilers
 * in a portable way. For this reason, Mbed TLS also provides the configuration
 * option MBEDTLS_PLATFORM_ZEROIZE_ALT, which allows users to configure
 * mbedtls_platform_zeroize() to use a suitable implementation for their
 * platform and needs.
 */
static void * (* const volatile memset_func)( void *<