Files
cromite/build/patches/Enable-ProcessBoundStringEncryption-by-default.patch
T
2025-10-27 13:57:27 +01:00

26 lines
923 B
Diff

From: uazo <uazo@users.noreply.github.com>
Date: Mon, 20 Jan 2025 16:55:57 +0000
Subject: Enable ProcessBoundStringEncryption by default
Data placed into a crypto::ProcessBoundString no longer appears in crash dumps
or memory dumps so should be used for any sensitive data that should be process-bound.
https://issuetracker.google.com/issues/372873695
License: GPL-2.0-or-later - https://spdx.org/licenses/GPL-2.0-or-later.html
---
crypto/features.cc | 3 +++
1 file changed, 3 insertions(+)
diff --git a/crypto/features.cc b/crypto/features.cc
--- a/crypto/features.cc
+++ b/crypto/features.cc
@@ -15,4 +15,7 @@ BASE_FEATURE(kIsHardwareBackedFixEnabled, base::FEATURE_ENABLED_BY_DEFAULT);
BASE_FEATURE(kMigrateIOSKeychainAccessibility,
base::FEATURE_DISABLED_BY_DEFAULT);
+#if BUILDFLAG(IS_WIN)
+SET_CROMITE_FEATURE_ENABLED(kProcessBoundStringEncryption);
+#endif
} // namespace crypto::features
--