--zero-fill-buffers 命令行选项

【The --zero-fill-buffers command-line option】

可以使用 --zero-fill-buffers 命令行选项启动 Node.js，以便默认情况下所有新分配的 Buffer 实例在创建时都会被填充为零。如果不使用该选项，通过 Buffer.allocUnsafe() 和 Buffer.allocUnsafeSlow() 创建的缓冲区不会被填充为零。使用此标志可能会对性能产生可测量的负面影响。仅在需要确保新分配的 Buffer 实例不能包含可能敏感的旧数据时才使用 --zero-fill-buffers 选项。

【Node.js can be started using the --zero-fill-buffers command-line option to cause all newly-allocated Buffer instances to be zero-filled upon creation by default. Without the option, buffers created with Buffer.allocUnsafe() and Buffer.allocUnsafeSlow() are not zero-filled. Use of this flag can have a measurable negative impact on performance. Use the --zero-fill-buffers option only when necessary to enforce that newly allocated Buffer instances cannot contain old data that is potentially sensitive.】

$ node --zero-fill-buffers
> Buffer.allocUnsafe(5);
<Buffer 00 00 00 00 00> 拷贝