wolfSSL/wolfssl
1
0
Fork 1
mirror of https://github.com/wolfSSL/wolfssl.git synced 2026-07-05 21:40:48 +02:00
Code Issues Packages Projects Releases Wiki Activity

Harden hash comparison in TLS1.2 finished

Browse Source
This commit is contained in:
Tobias Frauenschläger
2026-03-05 11:46:33 +01:00
parent 1c8d593af7
commit eaa40f3df6
1 changed files with 2 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/internal.c
+2 -1
View File
@@ -17611,7 +17611,8 @@ int DoFinished(WOLFSSL* ssl, const byte* input, word32* inOutIdx, word32 size,
#endif
if (sniff == NO_SNIFF) {
if (XMEMCMP(input + *inOutIdx, &ssl->hsHashes->verifyHashes,size) != 0){
if (ConstantCompare(input + *inOutIdx,
(const byte*)&ssl->hsHashes->verifyHashes, (int)size) != 0) {
WOLFSSL_MSG("Verify finished error on hashes");
WOLFSSL_ERROR_VERBOSE(VERIFY_FINISHED_ERROR);
return VERIFY_FINISHED_ERROR;