summaryrefslogtreecommitdiffstats
path: root/lib/libssl/src/ssl/s3_clnt.c
diff options
context:
space:
mode:
authortedu <tedu@openbsd.org>2014-06-04 14:10:23 +0000
committertedu <tedu@openbsd.org>2014-06-04 14:10:23 +0000
commit0fbb22b80081dae9dd04cbedeae2fa3ba34318dd (patch)
treedffb8775e5ef95187e0b23e9c49a5b1b2b103a00 /lib/libssl/src/ssl/s3_clnt.c
parentClearing the data toggle bit only makes sense for endpoints that use it, (diff)
downloadwireguard-openbsd-0fbb22b80081dae9dd04cbedeae2fa3ba34318dd.tar.xz
wireguard-openbsd-0fbb22b80081dae9dd04cbedeae2fa3ba34318dd.zip
without overthinking it, replace a few memcmp calls with CRYPTO_memcmp
where it is feasible to do so. better safe than sorry.
Diffstat (limited to 'lib/libssl/src/ssl/s3_clnt.c')
-rw-r--r--lib/libssl/src/ssl/s3_clnt.c4
1 files changed, 2 insertions, 2 deletions
diff --git a/lib/libssl/src/ssl/s3_clnt.c b/lib/libssl/src/ssl/s3_clnt.c
index 052d23bbf40..2c3ce60fb3a 100644
--- a/lib/libssl/src/ssl/s3_clnt.c
+++ b/lib/libssl/src/ssl/s3_clnt.c
@@ -887,9 +887,9 @@ ssl3_get_server_hello(SSL *s)
}
if (j != 0 && j == s->session->session_id_length &&
- memcmp(p, s->session->session_id, j) == 0) {
+ CRYPTO_memcmp(p, s->session->session_id, j) == 0) {
if (s->sid_ctx_length != s->session->sid_ctx_length ||
- memcmp(s->session->sid_ctx,
+ CRYPTO_memcmp(s->session->sid_ctx,
s->sid_ctx, s->sid_ctx_length)) {
/* actually a client application bug */
al = SSL_AD_ILLEGAL_PARAMETER;