Files
cromite/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch
T
2025-08-30 12:50:59 +02:00

26 lines
894 B
Diff

From: uazo <uazo@users.noreply.github.com>
Date: Mon, 20 Jan 2025 16:55:57 +0000
Subject: Enable ProcessBoundStringEncryption by default
Data placed into a crypto::ProcessBoundString no longer appears in crash dumps
or memory dumps so should be used for any sensitive data that should be process-bound.
https://issuetracker.google.com/issues/372873695
License: GPL-2.0-or-later - https://spdx.org/licenses/GPL-2.0-or-later.html
---
crypto/features.cc | 3 +++
1 file changed, 3 insertions(+)
diff --git a/crypto/features.cc b/crypto/features.cc
--- a/crypto/features.cc
+++ b/crypto/features.cc
@@ -20,4 +20,7 @@ BASE_FEATURE(kMigrateIOSKeychainAccessibility,
"MigrateIOSKeychainAccessibility",
base::FEATURE_DISABLED_BY_DEFAULT);
+#if BUILDFLAG(IS_WIN)
+SET_CROMITE_FEATURE_ENABLED(kProcessBoundStringEncryption);
+#endif
} // namespace crypto::features
--