tree fccc879406b6681164818ee27e08c589fecbdcc2
parent da0913ba6b3ddd5708189df8115d85bbd0ff2be3
author Gilles Peskine <Gilles.Peskine@arm.com> 1656601571 +0200
committer Gilles Peskine <Gilles.Peskine@arm.com> 1656601571 +0200

Call setbuf when reading or writing files: programs

After opening a file containing sensitive data, call mbedtls_setbuf() to
disable buffering. This way, we don't expose sensitive data to a memory
disclosure vulnerability in a buffer outside our control.

This commit adds a call to mbedtls_setbuf() after each call to fopen(),
but only in sample programs that were calling mbedtls_platform_zeroize().
Don't bother protecting stdio buffers in programs where application buffers
weren't protected.

Signed-off-by: Gilles Peskine <Gilles.Peskine@arm.com>