Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 17 Oct 1996 21:59:25 -0700
From:      John Polstra <jdp@polstra.com>
To:        ache@nagual.ru
Cc:        guido@gvr.win.tue.nl, thorpej@nas.nasa.gov, phk@critter.tfs.com, freebsd-hackers@freebsd.org, tech-userlevel@netbsd.org
Subject:   Re: cvs commit: src/lib/libc/db/hash hash_buf.c
Message-ID:  <199610180459.VAA06725@austin.polstra.com>
In-Reply-To: <199610172157.BAA00344@nagual.ru>
References:  <199610172157.BAA00344@nagual.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
> I consider it as a bad move too and performance degradation.
> Why only DB? Why you don't automatically clear stack too? :-)
> 
> Passwords can be stored anywhere in the application,
> and it is per-application task to clear sensetive data anywhere.
> 
> Please, back out this change.

I agree.  This change should definitely be backed out.
--
   John Polstra                                       jdp@polstra.com
   John D. Polstra & Co., Inc.                Seattle, Washington USA
   "Self-knowledge is always bad news."                 -- John Barth



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?199610180459.VAA06725>