Re: Credentials held unencrypted in memory during runtime

>
> I think the issue is simply that when the program (TProc) exits, that
> physical memory is freed and can then be allocated to another process.
> If it contains sensitive information then the second process, which
> may be completely unrelated, can see it.

Windows has a Zero Memory Manager Thread which overrides all freed RAM
with Zeros to avoid such things. Check Process Explorer or
Processhacker to see this.

------------------------------------------------------
http://tortoisesvn.tigris.org/ds/viewMessage.do?dsForumId=4061&dsMessageId=2719413

To unsubscribe from this discussion, e-mail: [users-unsubscribe_at_tortoisesvn.tigris.org].
Received on 2011-04-13 14:01:16 CEST