Skip to content

Commit 6c37629

Browse files
authored
Merge pull request #9898 from julek-wolfssl/fenrir/15
Replace XMEMCMP with ConstantCompare for ticket MAC verification
2 parents 6424092 + 94adedd commit 6c37629

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/ssl.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -16423,7 +16423,7 @@ static int wolfSSL_TicketKeyCb(WOLFSSL* ssl,
1642316423
goto end;
1642416424
if (!wolfSSL_HMAC_Final(&hmacCtx, digest, &mdSz))
1642516425
goto end;
16426-
if (XMEMCMP(mac, digest, mdSz) != 0)
16426+
if (ConstantCompare(mac, digest, (int)mdSz) != 0)
1642716427
goto end;
1642816428

1642916429
/* Decrypt the ticket data in place. */

0 commit comments

Comments
 (0)