Skip to content

[C++][Parquet] WipeOutDecryptionKeys doesn't securely wipe out keys #31603

@asfimport

Description

@asfimport

InternalFileDecryptor::WipeOutDecryptionKeys() merely call std::string::clear to dispose of the decryption key contents, but that method is not guaranteed to clear memory (it probably doesn't, actually).

We should probably devise a portable wrapper function for the various OS-specific memory clearing utilities.

Reporter: Antoine Pitrou / @pitrou

Note: This issue was originally created as ARROW-16202. Please see the migration documentation for further details.

Metadata

Metadata

Assignees

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions