[lifthrasiir]

> No malloc().

...by having your own arena allocator! I do agree that it is quite doable in this particular case, but I always remember that a custom memory allocator of OpenSSL made Heartbleed much more devastating.

[spc476]

... of memory passed in by the user! So it's up to the caller to make sure memory contains unclassified information.