cloud-sdk 0.38.0

no_std-first provider-neutral cloud SDK foundations.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38

//! Mandatory response cleanup and optional platform hooks.

/// Optional additive cleanup hook for caller-owned response storage.
///
/// Core volatile-clears the complete storage before and after this hook. The
/// hook can add platform controls such as cache eviction, but a no-op or faulty
/// implementation cannot replace or weaken the mandatory clear.
pub trait ResponseStorageSanitizer {
    /// Applies an additive platform-specific cleanup operation.
    fn sanitize_response_storage(&self, response_storage: &mut [u8]);
}

pub(crate) fn sanitize_response_storage(
    storage: &mut [u8],
    additive: Option<&dyn ResponseStorageSanitizer>,
) {
    cloud_sdk_sanitization::sanitize_bytes(storage);
    if let Some(additive) = additive {
        let mut final_clear = MandatoryFinalClear { storage };
        additive.sanitize_response_storage(final_clear.storage_mut());
    }
}

struct MandatoryFinalClear<'a> {
    storage: &'a mut [u8],
}

impl MandatoryFinalClear<'_> {
    fn storage_mut(&mut self) -> &mut [u8] {
        self.storage
    }
}

impl Drop for MandatoryFinalClear<'_> {
    fn drop(&mut self) {
        cloud_sdk_sanitization::sanitize_bytes(self.storage);
    }
}