ipsec-305.20.1.tar.gz

[apple/ipsec.git] / ipsec-tools / racoon / isakmp_quick.c

diff --git a/ipsec-tools/racoon/isakmp_quick.c b/ipsec-tools/racoon/isakmp_quick.c
index 8bb4a877c32c92fa6f25295c71ede609976283b6..808ce2b0e779a5be1f8ef7c91f5b93845c08893c 100644 (file)
--- a/ipsec-tools/racoon/isakmp_quick.c
+++ b/ipsec-tools/racoon/isakmp_quick.c
@@ -691,7 +691,7 @@ quick_i2recv(iph2, msg0)
                goto end;
        }
 
                goto end;
        }
 

-       result = memcmp(my_hash->v, r_hash, my_hash->l);
+       result = timingsafe_bcmp(my_hash->v, r_hash, my_hash->l);

        vfree(my_hash);
 
        if (result) {
        vfree(my_hash);
 
        if (result) {


@@ -1020,7 +1020,7 @@ quick_i4recv(iph2, msg0)
                goto end;
        }
 
                goto end;
        }
 

-       result = memcmp(my_hash->v, r_hash, my_hash->l);
+       result = timingsafe_bcmp(my_hash->v, r_hash, my_hash->l);

        vfree(my_hash);
 
        if (result) {
        vfree(my_hash);
 
        if (result) {


@@ -1357,7 +1357,7 @@ quick_r1recv(iph2, msg0)
                goto end;
        }
 
                goto end;
        }
 

-       result = memcmp(my_hash->v, r_hash, my_hash->l);
+       result = timingsafe_bcmp(my_hash->v, r_hash, my_hash->l);

        vfree(my_hash);
 
        if (result) {
        vfree(my_hash);
 
        if (result) {


@@ -1891,7 +1891,7 @@ quick_r3recv(iph2, msg0)
                goto end;
        }
 
                goto end;
        }
 

-       result = memcmp(my_hash->v, r_hash, my_hash->l);
+       result = timingsafe_bcmp(my_hash->v, r_hash, my_hash->l);

        vfree(my_hash);
 
        if (result) {
        vfree(my_hash);
 
        if (result) {