]> xenbits.xensource.com Git - libvirt.git/commitdiff
Revert "conf: clean up memory containing secrets before freeing"
authorPeter Krempa <pkrempa@redhat.com>
Wed, 7 Sep 2022 11:09:13 +0000 (13:09 +0200)
committerPeter Krempa <pkrempa@redhat.com>
Wed, 7 Sep 2022 13:54:09 +0000 (15:54 +0200)
Adding supposedly secure cleanup for secrets in anything related to the
XML parser is pointless because there are multiple other un-sanitized
copies of the full XML and the XML parser state at the very least.

Similarly in case RPC was used to transport the XML the RPC buffers are
not sanitized.

Additionally this patch was incomplete as it didn't sanitize the
password in the cleanup function for virDomainGraphicsAuthDef.

This reverts commit 51f8130d78fde3201b49c02b7095ff918b6e658a

Signed-off-by: Peter Krempa <pkrempa@redhat.com>
Reviewed-by: Pavel Hrdina <phrdina@redhat.com>
Reviewed-by: Ján Tomko <jtomko@redhat.com>
src/conf/domain_conf.c

index 3d1bf18c6c9a9910087a7a5dd9f841d1ac6eeef9..406c348a00e956a19a51687d29478f4a47ebbf96 100644 (file)
@@ -60,7 +60,6 @@
 #include "virdomainsnapshotobjlist.h"
 #include "virdomaincheckpointobjlist.h"
 #include "virutil.h"
-#include "virsecureerase.h"
 #include "virdomainjob.h"
 
 #define VIR_FROM_THIS VIR_FROM_DOMAIN
@@ -10862,7 +10861,6 @@ virDomainGraphicsAuthDefParseXML(xmlNodePtr node,
             virReportError(VIR_ERR_INTERNAL_ERROR,
                            _("cannot parse password validity time '%s', expect YYYY-MM-DDTHH:MM:SS"),
                            validTo);
-            virSecureEraseString(def->passwd);
             VIR_FREE(def->passwd);
             return -1;
         }