diff options
author | Martin Willi <martin@revosec.ch> | 2015-04-11 15:56:42 +0200 |
---|---|---|
committer | Martin Willi <martin@revosec.ch> | 2015-04-14 12:02:51 +0200 |
commit | 161a015782dbd7acf291f621d50cde24a6ed813d (patch) | |
tree | b46293e2993cf75e44888b1bd8ef73d0e97e797e /src/libtls/tls_server.c | |
parent | 9d6e952201a1292087dc42b16a3055a99dbee7ba (diff) | |
download | strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.bz2 strongswan-161a015782dbd7acf291f621d50cde24a6ed813d.tar.xz |
utils: Use chunk_equals_const() for all cryptographic purposes
Diffstat (limited to 'src/libtls/tls_server.c')
-rw-r--r-- | src/libtls/tls_server.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/src/libtls/tls_server.c b/src/libtls/tls_server.c index b1a214f7f..f9295a160 100644 --- a/src/libtls/tls_server.c +++ b/src/libtls/tls_server.c @@ -607,7 +607,7 @@ static status_t process_finished(private_tls_server_t *this, this->alert->add(this->alert, TLS_FATAL, TLS_INTERNAL_ERROR); return NEED_MORE; } - if (!chunk_equals(received, chunk_from_thing(buf))) + if (!chunk_equals_const(received, chunk_from_thing(buf))) { DBG1(DBG_TLS, "received client finished invalid"); this->alert->add(this->alert, TLS_FATAL, TLS_DECRYPT_ERROR); |