Zeroes the intermediate []byte slice after copying into the memguard.LockedBuffer to prevent decrypted secrets from lingering in unprotected heap memory.
Zeroes the intermediate `[]byte` slice after copying into the `memguard.LockedBuffer` to prevent decrypted secrets from lingering in unprotected heap memory.
sneak
was assigned by clawbot2026-02-08 21:06:01 +01:00
The decrypted data from io.ReadAll was copied into a memguard
LockedBuffer but the original byte slice was never zeroed, leaving
plaintext in swappable, dumpable heap memory.
sneak
merged commit 6ffb24b544 into main2026-02-09 02:18:06 +01:00
Blocking a user prevents them from interacting with repositories, such as opening or commenting on pull requests or issues. Learn more about blocking a user.
Zeroes the intermediate
[]byteslice after copying into thememguard.LockedBufferto prevent decrypted secrets from lingering in unprotected heap memory.