oysteikt/heimdal
0
0
Fork 0
Code Issues 5 Pull Requests Releases Activity

use krb5_data_ct_cmp

Browse Source
This commit is contained in:
Love Hornquist Astrand
2010-11-06 20:52:53 +01:00
parent 2d1ca83efa
commit 5a801c8f4a
1 changed files with 1 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
lib/krb5/crypto.c
View File

@@ -490,9 +490,7 @@ verify_checksum(krb5_context context,
return ret; return ret;
} }
if(c.checksum.length != cksum->checksum.length || if(krb5_data_ct_cmp(&c.checksum, &cksum->checksum) != 0) {
ct_memcmp(c.checksum.data, cksum->checksum.data, c.checksum.length)) {
krb5_clear_error_message (context);
ret = KRB5KRB_AP_ERR_BAD_INTEGRITY; ret = KRB5KRB_AP_ERR_BAD_INTEGRITY;
krb5_set_error_message(context, ret, krb5_set_error_message(context, ret,
N_("Decrypt integrity check failed for checksum " N_("Decrypt integrity check failed for checksum "