diff options
| author |   tedu <tedu@openbsd.org> | 2014-06-04 14:10:23 +0000 |
|---|---|---|
| committer | tedu <tedu@openbsd.org> | 2014-06-04 14:10:23 +0000 |
| commit | 0fbb22b80081dae9dd04cbedeae2fa3ba34318dd (patch) | |
| tree | dffb8775e5ef95187e0b23e9c49a5b1b2b103a00 /lib/libssl/t1_lib.c | |
| parent | Clearing the data toggle bit only makes sense for endpoints that use it, (diff) | |
| download | wireguard-openbsd-0fbb22b80081dae9dd04cbedeae2fa3ba34318dd.tar.xz wireguard-openbsd-0fbb22b80081dae9dd04cbedeae2fa3ba34318dd.zip | |
without overthinking it, replace a few memcmp calls with CRYPTO_memcmp
where it is feasible to do so. better safe than sorry.
Diffstat (limited to 'lib/libssl/t1_lib.c')
| -rw-r--r-- | lib/libssl/t1_lib.c | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/libssl/t1_lib.c b/lib/libssl/t1_lib.c index 3546a45df12..a18032b9c8b 100644 --- a/lib/libssl/t1_lib.c +++ b/lib/libssl/t1_lib.c @@ -2083,7 +2083,7 @@ tls_decrypt_ticket(SSL *s, const unsigned char *etick, int eticklen, renew_ticket = 1; } else { /* Check key name matches */ - if (memcmp(etick, tctx->tlsext_tick_key_name, 16)) + if (CRYPTO_memcmp(etick, tctx->tlsext_tick_key_name, 16)) return 2; HMAC_Init_ex(&hctx, tctx->tlsext_tick_hmac_key, 16, tlsext_tick_md(), NULL); |