feat(security): add Win32 VirtualLock memory protection, CFA error diagnostics, and ShellBag OpSec

2026-09-10 12:27:57 +02:00
parent 90cf4927af
commit 99813ae2a3
6 changed files with 122 additions and 3 deletions
@@ -345,6 +345,13 @@ impl CarrierFsInner {
    }
 }

+impl Drop for CarrierFsInner {
+    fn drop(&mut self) {
+        crate::windows::unlock_memory(self.dek_outer.as_ptr(), 32);
+        crate::windows::unlock_memory(self.dek_inner.as_ptr(), 32);
+    }
+}
+
 /// WebDAV-Filesystem-Treiber für den steganografischen Alibi-Carrier (Hidden Vault).
 #[derive(Clone)]
 pub struct CarrierFs {
@@ -380,6 +387,10 @@ impl CarrierFs {
            .map(|d| d.as_secs())
            .unwrap_or(0);

+        // Forensischer RAM-Paging-Schutz via VirtualLock
+        crate::windows::lock_memory(dek_outer.as_ptr(), 32);
+        crate::windows::lock_memory(dek_inner.as_ptr(), 32);
+
        let inner = CarrierFsInner {
            db,
            carrier_node_id,