[fpc-pascal] Processing passwords etc.

[Sven Barth]

Am 11.04.2014 20:50 schrieb "waldo kitty" <wkitty42 at windstream.net>:
>
> On 4/11/2014 5:03 AM, Michael Van Canneyt wrote:
>>
>> The main point is that in FPC you can install a memory manager that
wipes out
>> any memory when getting or releasing it, if you want to make your
software more
>> secure that way.
>
[snip]
>
> i don't know how one would go about cleaning released memory as someone
else asked about (eg: extending an array or string or etc)... once the
memory is released, it is no longer accessible, right?

That's where the heap manager comes in. In FPC every allocation that is not
done manually through OS functions (namely string/array allocation, class
allocation, getmem() and new()) go through the heap manager of which you
can register a custom one. This heap manager hooks the allocation and
deallocation calls and thus you could provide a manager that clears
deallocated memory (or fills with random data) before it's passed on to the
default heap manager.

Regards,
Sven
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freepascal.org/pipermail/fpc-pascal/attachments/20140412/fedf67de/attachment.html>