[Security] decrypted text leaked
jmp0x7c00 opened this issue · 0 comments
jmp0x7c00 commented
decrypted
is a sensitive variable that holds the decrypted text:
Fidelius/web_enclave/isv_enclave/isv_enclave.cpp
Line 1012 in ab0d846
v->getReturnVar()->setString(decrypted)
: the content of decrypted
will be stored into v->getReturnVar
Fidelius/web_enclave/isv_enclave/isv_enclave.cpp
Line 1013 in ab0d846
the stored content will be leaked outside enclave by console printing here:
Fidelius/web_enclave/isv_enclave/isv_enclave.cpp
Line 1020 in ab0d846