On Mon, Apr 6, 2020 at 10:51 AM David Howells <dhowells@xxxxxxxxxx> wrote: > > The allocation might be by vmalloc rather than kmalloc. I'm not sure if that > makes things more difficult. It does add yet another place where we'd have to save the "this allocation is special", but it's not insurmountable. That said, I think the short-term and simple solution is to just teach people that sensitive free's are different, and at least have the key subsystem with sane naming. And yes, then eventually convert the existing crypto subsystem uses too for consistency. Linus