torproject/tor
1
0
Fork 0
mirror of https://gitlab.torproject.org/tpo/core/tor.git synced 2024-12-06 19:41:15 +01:00
Code Issues Actions Packages Projects Releases Wiki Activity

Merge remote-tracking branch 'public/bug3122_memcmp_022' into maint-0.2.2

Browse Source
This commit is contained in:
Nick Mathewson
2011-05-12 19:25:14 -04:00
parent 379de3d10a 8fb38331c3
commit 59a6df8882
36 changed files with 427 additions and 176 deletions
Download Patch File Download Diff File Expand all files Collapse all files
changes/bug3122_memcmp
+7
View File
@@ -0,0 +1,7 @@
o Security fixes
- Replace all potentially sensitive memory comparison operations
with versions whose runtime does not depend on the data being
compared. This will help resist a class of attacks where an
adversary can use variations in timing information to learn
sensitive data. Fix for one case of bug 3122. (Safe memcmp
implementation by Robert Ransom based partially on code by DJB.)