wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 07:10:49 +02:00
Code Issues Packages Projects Releases Wiki Activity

Always eval both ConstantCompare statements

Browse Source
This commit is contained in:
Juliusz Sosinowicz
2026-03-06 17:56:33 +01:00
parent 1555ec4b76
commit 479de5a211
1 changed files with 8 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tls.c
+8 -7
View File
@@ -6072,15 +6072,16 @@ static int TLSX_SecureRenegotiation_Parse(WOLFSSL* ssl, const byte* input,
}
else if (*input == 2 * TLS_FINISHED_SZ &&
length == 2 * TLS_FINISHED_SZ + OPAQUE8_LEN) {
int cmpRes = 0;
input++; /* get past size */
cmpRes |= ConstantCompare(input,
ssl->secure_renegotiation->client_verify_data,
TLS_FINISHED_SZ);
cmpRes |= ConstantCompare(input + TLS_FINISHED_SZ,
ssl->secure_renegotiation->server_verify_data,
TLS_FINISHED_SZ);
/* validate client and server verify data */
if (ConstantCompare(input,
ssl->secure_renegotiation->client_verify_data,
TLS_FINISHED_SZ) == 0 &&
ConstantCompare(input + TLS_FINISHED_SZ,
ssl->secure_renegotiation->server_verify_data,
TLS_FINISHED_SZ) == 0) {
if (cmpRes == 0) {
WOLFSSL_MSG("SCR client and server verify data match");
ret = 0; /* verified */
}