diff options
| author | Martin Willi <martin@revosec.ch> | 2015-04-14 11:57:17 +0200 |
|---|---|---|
| committer | Martin Willi <martin@revosec.ch> | 2015-04-14 12:02:51 +0200 |
| commit | aa9b74931f4639628b369ffb290721f5ec263f69 (patch) | |
| tree | b46293e2993cf75e44888b1bd8ef73d0e97e797e /src/libtls/tls_peer.c | |
| parent | b17f0beda805a8096de6a381a4845711a64a500e (diff) | |
| parent | 161a015782dbd7acf291f621d50cde24a6ed813d (diff) | |
| download | strongswan-aa9b74931f4639628b369ffb290721f5ec263f69.tar.bz2 strongswan-aa9b74931f4639628b369ffb290721f5ec263f69.tar.xz | |
Merge branch 'const-memeq'
Introduce constant time memory comparing functions for cryptographic purposes,
and a tool to test such functions or crypto transforms relying on them.
Diffstat (limited to 'src/libtls/tls_peer.c')
| -rw-r--r-- | src/libtls/tls_peer.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c index e6be36b7b..86b94ab85 100644 --- a/src/libtls/tls_peer.c +++ b/src/libtls/tls_peer.c @@ -641,7 +641,7 @@ static status_t process_finished(private_tls_peer_t *this, bio_reader_t *reader) this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR); return NEED_MORE; } - if (!chunk_equals(received, chunk_from_thing(buf))) + if (!chunk_equals_const(received, chunk_from_thing(buf))) { DBG1(DBG_TLS, "received server finished invalid"); this->alert->add(this->alert, TLS_FATAL, TLS_DECRYPT_ERROR); |