DF-0737 / fix.diff
diff --git a/sys/netproto/smb/smb_crypt.c b/sys/netproto/smb/smb_crypt.c --- a/sys/netproto/smb/smb_crypt.c +++ b/sys/netproto/smb/smb_crypt.c @@ -301,7 +301,7 @@ /* * Now verify the signature. */ - if (bcmp(mtod(mdp->md_top, u_char *) + 14, digest, 8) != 0) + if (timingsafe_bcmp(mtod(mdp->md_top, u_char *) + 14, digest, 8) != 0) return (EAUTH); return (0); |