Use CRYPTO_memcmp when comparing authenticators
authorEmilia Kasper <emilia@openssl.org>
Wed, 27 May 2015 15:12:13 +0000 (17:12 +0200)
committerEmilia Kasper <emilia@openssl.org>
Mon, 8 Jun 2015 13:01:47 +0000 (15:01 +0200)
commit59b5ab4aa72527ce74dbe1a83988f194053293de
tree7b42cb87f785650ccd1c45af9e9a3da63ffd615f
parentc22ed559bbb6e75d03ce4e8cb3655988fc123d4f
Use CRYPTO_memcmp when comparing authenticators

Pointed out by Victor Vasiliev (vasilvv@mit.edu) via Adam Langley
(Google).

Reviewed-by: Rich Salz <rsalz@openssl.org>
(cherry picked from commit 1e4a355dcabe2f75df5bb8b41b394d37037169d2)
(cherry picked from commit ac32a77cd69784568090e934a31622ddfee49ca7)
crypto/evp/e_aes.c
crypto/evp/e_rc4_hmac_md5.c
crypto/modes/gcm128.c
crypto/pkcs12/p12_mutl.c