otto@openbsd otto@bsd.network

A common bug is to leave sensitive mem uncleared and reuse memory (e.g. via #malloc’s cache) without proper initialisation, leading to secret leakage. The purpose of freezero() and recallocarray() is to protect against that threat. Big threat to the application is the application.