clawbot fd77a047f9 security: zero plaintext after copying to memguard in DecryptWithIdentity ...

The decrypted data from io.ReadAll was copied into a memguard
LockedBuffer but the original byte slice was never zeroed, leaving
plaintext in swappable, dumpable heap memory.

2026-02-08 12:04:38 -08:00

5.0 KiB

Raw Blame History

View Raw