Skip to content

Commit df2450f

Browse files
committed
Fix citation rendering
1 parent 5f847b0 commit df2450f

File tree

1 file changed

+3
-3
lines changed

1 file changed

+3
-3
lines changed

docs/architecture/deep-dives/memory-hardening.md

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -11,11 +11,11 @@ where possible, as required by the protocol specification.
1111
To clear secrets on locking, Bitwarden clients use two techniques, zeroizing and process reload. For
1212
any memory that lives in Rust, memory is overwritten with zeroes, as soon as it becomes unused or
1313
gets dropped
14-
[1](https://github.com/bitwarden/sdk-internal/blob/4591981820f12a24e64609fb0a9fd4fdaabbb216/crates/bitwarden-crypto/src/lib.rs#L13).
14+
[[1]](https://github.com/bitwarden/sdk-internal/blob/4591981820f12a24e64609fb0a9fd4fdaabbb216/crates/bitwarden-crypto/src/lib.rs#L13).
1515
This hardens the SDK, and the Rust desktop module (desktop native) against memory being left behind.
1616
Process reload wipes the entire process - on the web app by reloading the page, on browser
1717
extensions by reloading the extension, and on desktop by force-crashing the renderer process
18-
[2](https://github.com/bitwarden/clients/blob/16e67566436ae7becbea85f900656c437204824b/libs/common/src/key-management/services/default-process-reload.service.ts#L22).
18+
[[2]](https://github.com/bitwarden/clients/blob/16e67566436ae7becbea85f900656c437204824b/libs/common/src/key-management/services/default-process-reload.service.ts#L22).
1919
The assumption here is that since the process dies, the memory gets wiped too. JavaScript does not
2020
provide mechanisms for reliably zeroizing memory. Secrets or partial secrets frequently remain in
2121
memory even after garbage collection cycles complete.
@@ -39,7 +39,7 @@ disable ptrace access and on MacOS the process is hardened using the Hardened Ru
3939
and also by using `PT_DENY_ATTACH` to prevent debugger attachment. On Linux, a dynamic library that
4040
sets [`PR_SET_DUMPABLE`](https://man7.org/linux/man-pages/man2/pr_set_dumpable.2const.html) is also
4141
injected into the renderer processes by injecting a shared object into the renderer processes
42-
[3](https://github.com/bitwarden/clients/blob/16e67566436ae7becbea85f900656c437204824b/apps/desktop/desktop_native/process_isolation/src/lib.rs),
42+
[`3`](https://github.com/bitwarden/clients/blob/16e67566436ae7becbea85f900656c437204824b/apps/desktop/desktop_native/process_isolation/src/lib.rs),
4343
so that these are isolated too. These mechanisms apply to all apps except for the Snap desktop app.
4444
Snap does not support
4545
[`PR_SET_DUMPABLE`](https://man7.org/linux/man-pages/man2/pr_set_dumpable.2const.html) currently and

0 commit comments

Comments
 (0)