Merge pull request dogecoin#2673 from patricklodder/1.14.5-2019-15947

security: Backport madvise() for lockedpool sensitive data from 1.21-dev
mutantkeyboard · Nov 6, 2021 · 97c98cf · 97c98cf
2 parents df8adf0 + 09f86e7
commit 97c98cf
Showing 1 changed file with 5 additions and 0 deletions.
diff --git a/src/support/lockedpool.cpp b/src/support/lockedpool.cpp
@@ -230,6 +230,11 @@ void *PosixLockedPageAllocator::AllocateLocked(size_t len, bool *lockingSuccess)
     addr = mmap(nullptr, len, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0);
     if (addr) {
         *lockingSuccess = mlock(addr, len) == 0;
+#if defined(MADV_DONTDUMP) // Linux
+        madvise(addr, len, MADV_DONTDUMP);
+#elif defined(MADV_NOCORE) // FreeBSD
+        madvise(addr, len, MADV_NOCORE);
+#endif
     }
     return addr;
 }