[ https://issues.apache.org/jira/browse/ARROW-16202?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17522414#comment-17522414 ]
Antoine Pitrou commented on ARROW-16202: ---------------------------------------- Draft PR for a low-level helper here: [https://github.com/apache/arrow/pull/12890] > [C++][Parquet] WipeOutDecryptionKeys doesn't securely wipe out keys > ------------------------------------------------------------------- > > Key: ARROW-16202 > URL: https://issues.apache.org/jira/browse/ARROW-16202 > Project: Apache Arrow > Issue Type: Bug > Components: C++, Parquet > Affects Versions: 7.0.0 > Reporter: Antoine Pitrou > Priority: Critical > Fix For: 8.0.0 > > > {{InternalFileDecryptor::WipeOutDecryptionKeys()}} merely call > {{std::string::clear}} to dispose of the decryption key contents, but that > method is not guaranteed to clear memory (it probably doesn't, actually). > We should probably devise a portable wrapper function for the various > OS-specific memory clearing utilities. -- This message was sent by Atlassian Jira (v8.20.1#820001)