From 8faa4cb64dbaba14147c927a2c4b84e197fbf4b1 Mon Sep 17 00:00:00 2001 From: Loup Vaillant Date: Sat, 21 Apr 2018 21:27:14 +0200 Subject: [PATCH] Warned about undefined behaviour --- doc/man/man3/intro.3monocypher | 8 ++++++++ 1 file changed, 8 insertions(+) diff --git a/doc/man/man3/intro.3monocypher b/doc/man/man3/intro.3monocypher index c20fdab..4694761 100644 --- a/doc/man/man3/intro.3monocypher +++ b/doc/man/man3/intro.3monocypher @@ -235,3 +235,11 @@ to disk regardless of swap policy, as well as virtual machine snapshots. Erasing secrets with .Xr crypto_wipe 3monocypher is often the only way to mitigate these dangers. +.Ss Undefined behaviour +Monocypher is a C library. +C is notoriously unsafe. +Using Monocypher incorrectly can trigger undefined behaviour. +This can lead to data corruption, data theft, or even arbitrary code +execution. +.Pp +Consider binding to a safe language if possible. -- 2.47.3