<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div>Thank you for your help.<br></div><div><br data-mce-bogus="1"></div><div>I tested the branch and it works fine.<br data-mce-bogus="1"></div><div>I have a small remark though. You pass "&request" to memwipe calls. It works but maybe "request" or "&request[0]" would be more legible.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><div>Thank you.<br data-mce-bogus="1"></div><div><br data-mce-bogus="1"></div><hr id="zwchr" data-marker="__DIVIDER__"><div data-marker="__HEADERS__"><b>De: </b>"Tobias Brunner" <tobias@strongswan.org><br><b>À: </b>"jean-francois hren" <jean-francois.hren@stormshield.eu>, "dev" <dev@lists.strongswan.org><br><b>Envoyé: </b>Jeudi 23 Septembre 2021 15:33:43<br><b>Objet: </b>Re: [strongSwan-dev] PFKey plugin and memwipe<br></div><div><br></div><div data-marker="__QUOTED_TEXT__">Hi Jean-Francois,<br><br>> In the PFKey plugin for handling SP and SA <br>> (src/libcharon/plugins/kernel_pfkey/kernel_pfkey_ipsec.c), no memwipe is <br>> done after an SA add, query or update on the request and/or out buffers <br>> as it is done in the Netlink plugin <br>> (src/libcharon/plugins/kernel_netlink/kernel_netlink_ipsec.c).<br>> Is there any technical reason it is not done ?<br><br>No, I don't think there is. I pushed a fix to the pfkey-memwipe branch.<br><br>Regards,<br>Tobias<br></div></div></body></html>