wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-06 02:20:50 +02:00
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #9864 from JacobBarthelmeh/f11

Browse Source 
harden compare of mac with TLS 1.3 finished
This commit is contained in:
Daniel Pouzzner
2026-03-05 16:19:07 -06:00
committed by GitHub
parent 396b553c45 5117acb7be
commit 90ca9c4b7f
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/tls13.c
+1 -1
View File
@@ -11214,7 +11214,7 @@ int DoTls13Finished(WOLFSSL* ssl, const byte* input, word32* inOutIdx,
if (sniff == NO_SNIFF) {
/* Actually check verify data. */
if (size > WC_MAX_DIGEST_SIZE ||
XMEMCMP(input + *inOutIdx, mac, size) != 0){
ConstantCompare(input + *inOutIdx, mac, size) != 0){
WOLFSSL_MSG("Verify finished error on hashes");
SendAlert(ssl, alert_fatal, decrypt_error);
WOLFSSL_ERROR_VERBOSE(VERIFY_FINISHED_ERROR);