SabaEskandarian/Fidelius

[Security] decrypted text leaked

jmp0x7c00 opened this issue · 0 comments

decrypted is a sensitive variable that holds the decrypted text:

std::string decrypted = std::string(decrypted_text);

v->getReturnVar()->setString(decrypted) : the content of decrypted will be stored into v->getReturnVar

v->getReturnVar()->setString(decrypted);

the stored content will be leaked outside enclave by console printing here:

printf_enc("loading data: %s\n", v->getReturnVar()->getString().c_str());