[libvirt] [PATCH 00/10] Improve handling of secrets in memory

Peter Krempa pkrempa at redhat.com
Mon Apr 1 13:04:51 UTC 2019


Peter Krempa (10):
  qemu: conf: Clear spice/vnc passwords from memory when freeing conf
    object
  util: alloc: Add automatic cleanup/disposal of strings
  Use VIR_AUTODISPOSE_STR instead of VIR_DISPOSE_STRING where possible
  util: buffer: Remove struct member munging
  util: alloc: Clean also stack'd data with VIR_AUTOCLEAN
  util: alloc: Introduce VIR_TMP
  qemu: Use VIR_TMP to stop leaking pointer to VNC password pointer to
    stack
  util: Introduce 'virpin' module for dealing with PIN numbers
  util: json: Make sure that Jano's pin is not leaked to the heap
  util: json: Nuke strings when freeing JSON objects

 cfg.mk                            |    2 +-
 src/Makefile.am                   |    3 +
 src/libvirt_private.syms          |    6 +
 src/libxl/libxl_conf.c            |    3 +-
 src/qemu/qemu_command.c           |    3 +-
 src/qemu/qemu_conf.c              |    4 +-
 src/qemu/qemu_hotplug.c           |    2 +-
 src/rpc/virnetlibsshsession.c     |   10 +-
 src/storage/storage_backend_rbd.c |    3 +-
 src/util/Makefile.inc.am          |    2 +
 src/util/viralloc.c               |   23 +
 src/util/viralloc.h               |   32 +-
 src/util/virbuffer.c              |   12 -
 src/util/virbuffer.h              |   16 +-
 src/util/virjson.c                |    8 +-
 src/util/virpin.c                 | 1053 +++++++++++++++++++++++++++++
 src/util/virpin.h                 |   30 +
 tests/utiltest.c                  |   30 +
 tests/virbuftest.c                |    2 +-
 tools/virsh-secret.c              |    3 +-
 20 files changed, 1200 insertions(+), 47 deletions(-)
 create mode 100644 src/util/virpin.c
 create mode 100644 src/util/virpin.h

-- 
2.20.1




More information about the libvir-list mailing list