mirror of
https://github.com/veracrypt/VeraCrypt.git
synced 2025-11-11 11:08:02 -06:00
Securely erase and protect buffer holding decrypted volume header.
This commit is contained in:
@@ -249,6 +249,7 @@ int ReadVolumeHeader (BOOL bBoot, char *encryptedHeader, Password *password, int
|
|||||||
#if !defined(DEVICE_DRIVER)
|
#if !defined(DEVICE_DRIVER)
|
||||||
VirtualLock (&keyInfo, sizeof (keyInfo));
|
VirtualLock (&keyInfo, sizeof (keyInfo));
|
||||||
VirtualLock (&dk, sizeof (dk));
|
VirtualLock (&dk, sizeof (dk));
|
||||||
|
VirtualLock (&header, sizeof (header));
|
||||||
#endif
|
#endif
|
||||||
#endif // !defined(_UEFI)
|
#endif // !defined(_UEFI)
|
||||||
|
|
||||||
@@ -571,10 +572,12 @@ err:
|
|||||||
ret:
|
ret:
|
||||||
burn (&keyInfo, sizeof (keyInfo));
|
burn (&keyInfo, sizeof (keyInfo));
|
||||||
burn (dk, sizeof(dk));
|
burn (dk, sizeof(dk));
|
||||||
|
burn (header, sizeof(header));
|
||||||
|
|
||||||
#if !defined(DEVICE_DRIVER) && !defined(_UEFI)
|
#if !defined(DEVICE_DRIVER) && !defined(_UEFI)
|
||||||
VirtualUnlock (&keyInfo, sizeof (keyInfo));
|
VirtualUnlock (&keyInfo, sizeof (keyInfo));
|
||||||
VirtualUnlock (&dk, sizeof (dk));
|
VirtualUnlock (&dk, sizeof (dk));
|
||||||
|
VirtualUnlock (&header, sizeof (header));
|
||||||
#endif
|
#endif
|
||||||
|
|
||||||
#if !defined(_UEFI)
|
#if !defined(_UEFI)
|
||||||
|
|||||||
Reference in New Issue
Block a user