DragonFlyBSD Kernel Audit
DF-0737 / fix.diff
← back to finding ↓ download raw
diff --git a/sys/netproto/smb/smb_crypt.c b/sys/netproto/smb/smb_crypt.c
--- a/sys/netproto/smb/smb_crypt.c
+++ b/sys/netproto/smb/smb_crypt.c
@@ -301,7 +301,7 @@
 	/*
 	 * Now verify the signature.
 	 */
-	if (bcmp(mtod(mdp->md_top, u_char *) + 14, digest, 8) != 0)
+	if (timingsafe_bcmp(mtod(mdp->md_top, u_char *) + 14, digest, 8) != 0)
 		return (EAUTH);
 
 	return (0);