guardedmem

Documentation

Overview

Package guardedmem implements memory allocations that are guarded against scanning. In addition, it supports storing keys in ballooned memory regions to make memory scanning and side channel attacks harder. It allocates at least three pages like this: |PROT_NONE|PROT_READ,PROT_WRITE|...|PROT_NONE|

Index

• func Alloc[T any](a T) (alloc *T, err error)
• func Free[T any](a *T) error
• func PageSize() int

Examples

• Alloc

Functions

func Alloc

func Alloc[T any](a T) (alloc *T, err error)

Alloc allocates *T in guarded memory. Tested.

Example

type X struct {
	a []byte
}
var x *X
x, err := Alloc(X{})
if err != nil {
	panic(err)
}
defer func() { _ = Free(x) }()

func Free

func Free[T any](a *T) error

Free memory occupied by *T as previously created by Alloc(T) *T. Tested.

func PageSize

func PageSize() int

PageSize returns the size of a page.