{"push_id":741476539,"size":1,"distinct_size":1,"ref":"refs/heads/master","head":"1568a77e0348e15eefe86ce5b8773b80ab3d2910","before":"78f9428e5d475790296219adef1f3ab470515136","commits":[{"sha":"1568a77e0348e15eefe86ce5b8773b80ab3d2910","author":{"email":"ec1c52f0363ae6ca086a66a4543f1ad6f5cb9af2@microsoft.com","name":"Tolga Acar"},"message":"ASACORE-2183 Memory not securely deleted.\n\nSensitive data, such as shared secrets, random number states,\nsecret keys, and private keys must be zeroed before\nfree/delete/stack-pop to minimize potential exposure in memory\nvia unintended stack and freed heap access.\n\nThe modified code clears memory via calls to ClearMemory() for\nDRBG state in the destructor, temporary seed value on the stack,\ntemporary internal DRBG state on the stack, ECC private key and\ncomputed shared secret in the destructor and on the stack, and\ngeneric key value (KeyBlob) when the Erase() method is called. It\nreplaces memset() calls that may be optimized out and adds a\ncouple of constructors with ClearMemory() to clear sensitive\nmemory to the ECCSecret::ECCSecretState and Crypto_DRBG::Context\nstructures.\n\nChange-Id: I2d7c8d157fb9aa4bb0b355809d3be8d33893be3e\nSigned-off-by: Tolga Acar <tolga@microsoft.com>","distinct":true,"url":"https://api.github.com/repos/allseenalliance/core-alljoyn/commits/1568a77e0348e15eefe86ce5b8773b80ab3d2910"}]}