Use constant time compare

2009-08-15 13:29:15 +02:00
parent 1cd2e05d82
commit fef41d9e23
1 changed files with 1 additions and 1 deletions
--- a/lib/hcrypto/rsa.c
+++ b/lib/hcrypto/rsa.c
@@ -278,7 +278,7 @@ RSA_check_key(const RSA *key)
 	return 0;
    }

-    if (ret == sizeof(inbuf) && memcmp(buffer, inbuf, sizeof(inbuf)) == 0) {
+    if (ret == sizeof(inbuf) && ct_memcmp(buffer, inbuf, sizeof(inbuf)) == 0) {
 	free(buffer);
 	return 1;
    }