generic-library/openssl
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity

Use CRYPTO_memcmp in ssl3_record.c

Browse Source 
Reviewed-by: Rich Salz <rsalz@openssl.org>
This commit is contained in:
Emilia Kasper 2015-05-29 13:14:08 +02:00
parent 1e4a355dca
commit 2974e3d464
1 changed files with 1 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

3
ssl/record/ssl3_record.c
View File

@ -1072,7 +1072,7 @@ int tls1_cbc_remove_padding(const SSL *s,
*/ */
if ((s->options & SSL_OP_TLS_BLOCK_PADDING_BUG) && !s->expand) { if ((s->options & SSL_OP_TLS_BLOCK_PADDING_BUG) && !s->expand) {
/* First packet is even in size, so check */ /* First packet is even in size, so check */
if ((memcmp(RECORD_LAYER_get_read_sequence(&s->rlayer), if ((CRYPTO_memcmp(RECORD_LAYER_get_read_sequence(&s->rlayer),
"\0\0\0\0\0\0\0\0", 8) == 0) && "\0\0\0\0\0\0\0\0", 8) == 0) &&
!(padding_length & 1)) { !(padding_length & 1)) {
s->s3->flags |= TLS1_FLAGS_TLS_PADDING_BUG; s->s3->flags |= TLS1_FLAGS_TLS_PADDING_BUG;
@ -1578,4 +1578,3 @@ int dtls1_get_record(SSL *s)
return (1); return (1);
} }