identification: Properly check length before comparing for binary DN equality

Fixes CVE-2013-6075.
This commit is contained in:
Martin Willi
2013-10-31 21:57:07 +01:00
committed by Andreas Steffen
parent ed3eb62723
commit 7f4a13fffb
+1 -1
View File
@@ -602,7 +602,7 @@ static bool compare_dn(chunk_t t_dn, chunk_t o_dn, int *wc)
}
}
/* try a binary compare */
if (memeq(t_dn.ptr, o_dn.ptr, t_dn.len))
if (chunk_equals(t_dn, o_dn))
{
return TRUE;
}