diff options
author | Martin Willi <martin@revosec.ch> | 2015-04-11 15:56:42 +0200 |
---|---|---|
committer | Martin Willi <martin@revosec.ch> | 2015-04-14 12:02:51 +0200 |
commit | 161a015782dbd7acf291f621d50cde24a6ed813d (patch) | |
tree | b46293e2993cf75e44888b1bd8ef73d0e97e797e /src/libtls/tls_peer.c | |
parent | 9d6e952201a1292087dc42b16a3055a99dbee7ba (diff) | |
download | strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.bz2 strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.xz |
utils: Use chunk_equals_const() for all cryptographic purposes
Diffstat (limited to 'src/libtls/tls_peer.c')
-rw-r--r-- | src/libtls/tls_peer.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libtls/tls_peer.c b/src/libtls/tls_peer.c index e6be36b7b..86b94ab85 100644 --- a/src/libtls/tls_peer.c +++ b/src/libtls/tls_peer.c @@ -641,7 +641,7 @@ static status_t process_finished(private_tls_peer_t *this, bio_reader_t *reader) this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR); return NEED_MORE; } - if (!chunk_equals(received, chunk_from_thing(buf))) + if (!chunk_equals_const(received, chunk_from_thing(buf))) { DBG1(DBG_TLS, "received server finished invalid"); this->alert->add(this->alert, TLS_FATAL, TLS_DECRYPT_ERROR); |