4 Commits

Author	SHA1	Message	Date
Joseph Sutton	feb36dbebf	lib/util: Change function to mem_equal_const_time() ... Since memcmp_const_time() doesn't act as an exact replacement for memcmp(), and its return value is only ever compared with zero, simplify it and emphasize the intention of checking equality by returning a bool instead. Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2022-06-09 22:49:29 +00:00
Joseph Sutton	ae6634c787	auth: Use constant-time memcmp when comparing sensitive buffers ... This helps to avoid timing attacks. BUG: https://bugzilla.samba.org/show_bug.cgi?id=15010 Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz> Reviewed-by: Andrew Bartlett <abartlet@samba.org>	2022-06-09 22:49:29 +00:00
Günther Deschner	30386c23ae	ntlmssp: when pulling messages it is important to clear memory first. ... Guenther Signed-off-by: Günther Deschner <gd@samba.org> Reviewed-by: Andreas Schneider <asn@samba.org>	2016-02-04 09:29:16 +01:00
Andrew Bartlett	0c6e4adcb2	ntlmssp: Move ntlmssp code to auth/ntlmssp ... This brings in the code from both libcli/auth and source4/auth/ntlmssp. Andrew Bartlett Signed-off-by: Stefan Metzmacher <metze@samba.org>	2011-10-18 13:13:31 +11:00