]> git.ipfire.org Git - thirdparty/hostap.git/commit
WPS: Use os_memcmp_const() for hash/password comparisons
authorJouni Malinen <j@w1.fi>
Sun, 29 Jun 2014 16:38:17 +0000 (19:38 +0300)
committerJouni Malinen <j@w1.fi>
Wed, 2 Jul 2014 09:38:47 +0000 (12:38 +0300)
commitce9c9bcc3883929f2768e8b72bd7fc9cfdab79b7
tree90696be55834c4efa1c74a6283e615e582fb00d9
parentafc3c8b07ffcdccc9349c83dfd3cc904ad9fbfb1
WPS: Use os_memcmp_const() for hash/password comparisons

This makes the implementation less likely to provide useful timing
information to potential attackers from comparisons of information
received from a remote device and private material known only by the
authorized devices.

Signed-off-by: Jouni Malinen <j@w1.fi>
src/wps/wps_attr_process.c
src/wps/wps_enrollee.c
src/wps/wps_registrar.c