wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 08:10:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9898 from julek-wolfssl/fenrir/15

Browse Source 
Replace XMEMCMP with ConstantCompare for ticket MAC verification
This commit is contained in:
Daniel Pouzzner
2026-03-06 22:20:38 -06:00
committed by GitHub
parent 6424092fa6 94adedd109
commit 6c37629aa5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/ssl.c
+1 -1
View File
@@ -16423,7 +16423,7 @@ static int wolfSSL_TicketKeyCb(WOLFSSL* ssl,
goto end;
if (!wolfSSL_HMAC_Final(&hmacCtx, digest, &mdSz))
goto end;
if (XMEMCMP(mac, digest, mdSz) != 0)
if (ConstantCompare(mac, digest, (int)mdSz) != 0)
goto end;
/* Decrypt the ticket data in place. */