libgcrypt and patches again

Nikos Mavrogiannopoulos n.mavrogiannopoulos at gmail.com
Tue Oct 11 12:25:26 CEST 2005


On Tuesday 11 October 2005 12:06, Werner Koch wrote:

> > implementation errors is a strange way to build security relevant
> > software. Securely freeing and cleaning resources is usually an important
> > part of cryptographic software solutions.
> Please understand that these are one time allocations. Consider them
> part of the DSO loading process.

I tend to agree with Dirk on that matter. If a program uses 10 shared 
libraries that do not deallocate their resources, checking for memory leaks 
in the program is a disaster.


-- 
Nikos Mavrogiannopoulos



More information about the Gcrypt-devel mailing list