apple / apple/foundationdb

Introduce Arena to allocate buffers which can't participate in memory dump

Open
#6,583 0 comments 0 reactions 1 assignee Claimed by @sfc-gh-ahusain View on GitHub
Dominant language
C++
Stars
16.7k
Forks
1.6k
Avg merge
1d 20h
Merged PRs (30d)
126

Description

FDB encryption support need to cache plaintext encryption keys in-memory; the ask with this ticket to devise measure such that FDB process dump doesn't end up persisting encryption keys cached in memory OR while it is getting constructed (encryption key derivation scheme); one proposal is:
1. Create an Arena backed by jemalloc allocated buffers.
2. Leverage [madvice](https://man7.org/linux/man-pages/man2/madvise.2.html) and set `MADV_DONTDUMP` to allocate buffers which needs to be prevented from FDB process memory dump.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.