aboutsummaryrefslogtreecommitdiffstats
path: root/src/libtls/tls_peer.c
diff options
context:
space:
mode:
authorMartin Willi <martin@revosec.ch>2015-04-11 15:56:42 +0200
committerMartin Willi <martin@revosec.ch>2015-04-14 12:02:51 +0200
commit161a015782dbd7acf291f621d50cde24a6ed813d (patch)
treeb46293e2993cf75e44888b1bd8ef73d0e97e797e /src/libtls/tls_peer.c
parent9d6e952201a1292087dc42b16a3055a99dbee7ba (diff)
downloadstrongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.bz2
strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.xz
utils: Use chunk_equals_const() for all cryptographic purposes
Diffstat (limited to 'src/libtls/tls_peer.c')
-rw-r--r--src/libtls/tls_peer.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c
index e6be36b7b..86b94ab85 100644
--- a/src/libtls/tls_peer.c
+++ b/src/libtls/tls_peer.c
@@ -641,7 +641,7 @@ static status_t process_finished(private_tls_peer_t *this, bio_reader_t *reader)
this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR);
return NEED_MORE;
}
- if (!chunk_equals(received, chunk_from_thing(buf)))
+ if (!chunk_equals_const(received, chunk_from_thing(buf)))
{
DBG1(DBG_TLS, "received server finished invalid");
this->alert->add(this->alert, TLS_FATAL, TLS_DECRYPT_ERROR);