CCMP MIC verified with non-constant-time memcmp

Summary

ccmp_decrypt (:642): if(memcmp(mic,a,ccmp.ic_trailer)!=0) libc memcmp short-circuits on first differing byte timing-dependent. mic=attacker-supplied 8B tag from frame trailer a=CBC-MAC under secret AES key. Practical exploitability negligible: each byte depends on all prior AES outputs+secret attacker cannot iterate guesses byte-by-byte (not CBC padding oracle). Hardening/best-practice item constant-time mandated for AEAD tag check costs nothing to fix. Fix: consttime_memequal.