ivial" patch anyways.
Martin
Am 23.06.2020 um 12:19 schrieb Matt Caswell:
>
> On 22/06/2020 18:28, Martin Elshuber wrote:
>> I might be blind, but I just cannot find the location where this
>> plaintext data is
>> zeroized, neither by OPENSSL_cleanse() nor memset().
>
Hi,
I have a question regarding the recordlayer and zeroization of plain
text data.
To my understanding openssl (I am on v1.1.1g) maintains inbound data for
TLS1.2 within
SSL.rlayer.rbuf.The data is split into records and the meta information
is kept in
SSL.rlayer.rrec. The data pointers isself a
