Philippe Mathieu-Daudé b317006a3f docs/secure-coding-practices: Describe how to use 'null-co' block driver ...

Document that security reports must use 'null-co,read-zeroes=on'
because otherwise the memory is left uninitialized (which is an
on-purpose performance feature).

Reviewed-by: Vladimir Sementsov-Ogievskiy <vsementsov@virtuozzo.com>
Signed-off-by: Philippe Mathieu-Daudé <philmd@redhat.com>
Message-Id: <20210601162548.2076631-1-philmd@redhat.com>
Signed-off-by: Kevin Wolf <kwolf@redhat.com>

2021-06-02 14:29:14 +02:00

4.7 KiB

Raw Blame History

View Raw