Merge pull request #2509 from barton2526/lockedpool_dontdump

lockedpool: When possible, use madvise to avoid including sensitive information in core dumps
gridcoin-community · May 20, 2022 · c3122d6 · c3122d6
2 parents 0e91de6 + 401b71f
commit c3122d6
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/support/lockedpool.cpp b/src/support/lockedpool.cpp
@@ -249,6 +249,11 @@ void *PosixLockedPageAllocator::AllocateLocked(size_t len, bool *lockingSuccess)
     }
     if (addr) {
         *lockingSuccess = mlock(addr, len) == 0;
+#if defined(MADV_DONTDUMP) // Linux
+        madvise(addr, len, MADV_DONTDUMP);
+#elif defined(MADV_NOCORE) // FreeBSD
+        madvise(addr, len, MADV_NOCORE);
+#endif
     }
     return addr;
 }