Usage of memset to eradicate string content

[Tor Lillqvist]

But if the password is used to load or save encrypted documents, then the
contents of the document (which the so carefully erased password protects)
is loaded into memory in plain-text, and is equally readable by an
adversary that has access to the virtual memory of your process, and might
get paged out to disk. So what's the win?

--tml
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.freedesktop.org/archives/libreoffice/attachments/20120823/b31d0415/attachment.html>