auth: Check result of gcrypt gcry_md_get_algo_dlen
When unknown hash is passed to gcry_md_get_algo_dlen 0 is returned. This
value is then used for memcmp so wrong hmac might be accepted as
correct.
Signed-off-by: Jan Friesse <jfriesse@redhat.com>
auth: Check result of gcrypt gcry_md_get_algo_dlen Tags None Referenced Files None Subscribers None
Description
Details
Event Timeline |