neobytes-project/neobytes
neobytes-project/neobytes
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases 1 Wiki Activity

Merge #10308: [wallet] Securely erase potentially sensitive keys/values

Browse Source 
6c914ac [wallet] Securely erase potentially sensitive keys/values (Thomas Snider)

Tree-SHA512: 071d88c4093108d4e4eced35a6ffcebe3f499798194f5b1be661ffa5b78b5f55311667f6d2a72758d85290f61f958381ee95d380b9045ca18e9e1875f0e686c8
This commit is contained in:
Wladimir J. van der Laan 2017-05-11 19:28:04 +02:00 committed by Alexander Block
parent e2225f37c2
commit f7174fb655
2 changed files with 22 additions and 20 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
src/support/cleanse.h
View File

@ -8,6 +8,7 @@
#include <stdlib.h> #include <stdlib.h>
// Attempt to overwrite data in the specified memory span.
void memory_cleanse(void *ptr, size_t len); void memory_cleanse(void *ptr, size_t len);
#endif // BITCOIN_SUPPORT_CLEANSE_H #endif // BITCOIN_SUPPORT_CLEANSE_H

27
src/wallet/db.h
View File

@ -126,22 +126,23 @@ protected:
Dbt datValue; Dbt datValue;
datValue.set_flags(DB_DBT_MALLOC); datValue.set_flags(DB_DBT_MALLOC);
int ret = pdb->get(activeTxn, &datKey, &datValue, 0); int ret = pdb->get(activeTxn, &datKey, &datValue, 0);
memset(datKey.get_data(), 0, datKey.get_size()); memory_cleanse(datKey.get_data(), datKey.get_size());
if (datValue.get_data() == NULL) bool success = false;
return false; if (datValue.get_data() != NULL) {
// Unserialize value // Unserialize value
try { try {
CDataStream ssValue((char*)datValue.get_data(), (char*)datValue.get_data() + datValue.get_size(), SER_DISK, CLIENT_VERSION); CDataStream ssValue((char*)datValue.get_data(), (char*)datValue.get_data() + datValue.get_size(), SER_DISK, CLIENT_VERSION);
ssValue >> value; ssValue >> value;
success = true;
} catch (const std::exception&) { } catch (const std::exception&) {
return false; // In this case success remains 'false'
} }
// Clear and free memory // Clear and free memory
memset(datValue.get_data(), 0, datValue.get_size()); memory_cleanse(datValue.get_data(), datValue.get_size());
free(datValue.get_data()); free(datValue.get_data());
return (ret == 0); }
return ret == 0 && success;
} }
template <typename K, typename T> template <typename K, typename T>
@ -168,8 +169,8 @@ protected:
int ret = pdb->put(activeTxn, &datKey, &datValue, (fOverwrite ? 0 : DB_NOOVERWRITE)); int ret = pdb->put(activeTxn, &datKey, &datValue, (fOverwrite ? 0 : DB_NOOVERWRITE));
// Clear memory in case it was a private key // Clear memory in case it was a private key
memset(datKey.get_data(), 0, datKey.get_size()); memory_cleanse(datKey.get_data(), datKey.get_size());
memset(datValue.get_data(), 0, datValue.get_size()); memory_cleanse(datValue.get_data(), datValue.get_size());
return (ret == 0); return (ret == 0);
} }
@ -191,7 +192,7 @@ protected:
int ret = pdb->del(activeTxn, &datKey, 0); int ret = pdb->del(activeTxn, &datKey, 0);
// Clear memory // Clear memory
memset(datKey.get_data(), 0, datKey.get_size()); memory_cleanse(datKey.get_data(), datKey.get_size());
return (ret == 0 || ret == DB_NOTFOUND); return (ret == 0 || ret == DB_NOTFOUND);
} }
@ -211,7 +212,7 @@ protected:
int ret = pdb->exists(activeTxn, &datKey, 0); int ret = pdb->exists(activeTxn, &datKey, 0);
// Clear memory // Clear memory
memset(datKey.get_data(), 0, datKey.get_size()); memory_cleanse(datKey.get_data(), datKey.get_size());
return (ret == 0); return (ret == 0);
} }
@ -254,8 +255,8 @@ protected:
ssValue.write((char*)datValue.get_data(), datValue.get_size()); ssValue.write((char*)datValue.get_data(), datValue.get_size());
// Clear and free memory // Clear and free memory
memset(datKey.get_data(), 0, datKey.get_size()); memory_cleanse(datKey.get_data(), datKey.get_size());
memset(datValue.get_data(), 0, datValue.get_size()); memory_cleanse(datValue.get_data(), datValue.get_size());
free(datKey.get_data()); free(datKey.get_data());
free(datValue.get_data()); free(datValue.get_data());
return 0; return 0;