[esprehn]

In something like a database zeroing or poisoning on free is probably a good idea. (These days probably all allocators should do it by default.)

Allocators are an interesting place to focus on for security. Chris did amazing work there for Blink that eventually rolled out to all of Chromium. The docs are a fun read.

https://blog.chromium.org/2021/04/efficient-and-safe-allocat...

https://chromium.googlesource.com/chromium/src/+/master/base...