Use constant time memcmp
This commit is contained in:
		| @@ -208,7 +208,7 @@ _gsskrb5_verify_8003_checksum( | ||||
| 	    *minor_status = 0; | ||||
| 	    return GSS_S_BAD_BINDINGS; | ||||
| 	} | ||||
| 	if(memcmp(hash, p, sizeof(hash)) != 0) { | ||||
| 	if(ct_memcmp(hash, p, sizeof(hash)) != 0) { | ||||
| 	    *minor_status = 0; | ||||
| 	    return GSS_S_BAD_BINDINGS; | ||||
| 	} | ||||
|   | ||||
		Reference in New Issue
	
	Block a user
	 Love Hornquist Astrand
					Love Hornquist Astrand