]> git.ipfire.org Git - thirdparty/hostap.git/commit - src/radius/radius_server.c
RADIUS: Use os_memcmp_const() for hash/password comparisons
authorJouni Malinen <j@w1.fi>
Sun, 29 Jun 2014 17:13:01 +0000 (20:13 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 2 Jul 2014 09:38:47 +0000 (12:38 +0300)
commitc2371953f8305ec950615e69e182cd29140af0e0
treebce6e14698b3b7ffb5c4d1da2f0d73c5528df251
parentce9c9bcc3883929f2768e8b72bd7fc9cfdab79b7
RADIUS: Use os_memcmp_const() for hash/password comparisons

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/radius/radius.c
src/radius/radius_server.c