1
0
mirror of https://github.com/veracrypt/VeraCrypt.git synced 2025-11-11 11:08:02 -06:00

Securely erase and protect buffer holding decrypted volume header.

This commit is contained in:
Mounir IDRASSI
2016-10-01 15:36:20 +02:00
parent 7d6347f468
commit 8e2c5ca45e

View File

@@ -249,6 +249,7 @@ int ReadVolumeHeader (BOOL bBoot, char *encryptedHeader, Password *password, int
#if !defined(DEVICE_DRIVER) #if !defined(DEVICE_DRIVER)
VirtualLock (&keyInfo, sizeof (keyInfo)); VirtualLock (&keyInfo, sizeof (keyInfo));
VirtualLock (&dk, sizeof (dk)); VirtualLock (&dk, sizeof (dk));
VirtualLock (&header, sizeof (header));
#endif #endif
#endif // !defined(_UEFI) #endif // !defined(_UEFI)
@@ -571,10 +572,12 @@ err:
ret: ret:
burn (&keyInfo, sizeof (keyInfo)); burn (&keyInfo, sizeof (keyInfo));
burn (dk, sizeof(dk)); burn (dk, sizeof(dk));
burn (header, sizeof(header));
#if !defined(DEVICE_DRIVER) && !defined(_UEFI) #if !defined(DEVICE_DRIVER) && !defined(_UEFI)
VirtualUnlock (&keyInfo, sizeof (keyInfo)); VirtualUnlock (&keyInfo, sizeof (keyInfo));
VirtualUnlock (&dk, sizeof (dk)); VirtualUnlock (&dk, sizeof (dk));
VirtualUnlock (&header, sizeof (header));
#endif #endif
#if !defined(_UEFI) #if !defined(_UEFI)