aboutsummaryrefslogtreecommitdiffstats
path: root/src/libtls/tls_server.c
diff options
context:
space:
mode:
authorMartin Willi <martin@revosec.ch>2015-04-11 15:56:42 +0200
committerMartin Willi <martin@revosec.ch>2015-04-14 12:02:51 +0200
commit161a015782dbd7acf291f621d50cde24a6ed813d (patch)
treeb46293e2993cf75e44888b1bd8ef73d0e97e797e /src/libtls/tls_server.c
parent9d6e952201a1292087dc42b16a3055a99dbee7ba (diff)
downloadstrongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.bz2
strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.xz
utils: Use chunk_equals_const() for all cryptographic purposes
Diffstat (limited to 'src/libtls/tls_server.c')
-rw-r--r--src/libtls/tls_server.c2
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libtls/tls_server.c b/src/libtls/tls_server.c
index b1a214f7f..f9295a160 100644
--- a/src/libtls/tls_server.c
+++ b/src/libtls/tls_server.c
@@ -607,7 +607,7 @@ static status_t process_finished(private_tls_server_t *this,
this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR);
return NEED_MORE;
}
- if (!chunk_equals(received, chunk_from_thing(buf)))
+ if (!chunk_equals_const(received, chunk_from_thing(buf)))
{
DBG1(DBG_TLS, "received client finished invalid");
this->alert->add(this->alert, TLS_FATAL, TLS_DECRYPT_ERROR);