identification: Properly check length before comparing for binary DN equality
Fixes CVE-2013-6075.
This commit is contained in:
committed by
Andreas Steffen
parent
ed3eb62723
commit
7f4a13fffb
@@ -602,7 +602,7 @@ static bool compare_dn(chunk_t t_dn, chunk_t o_dn, int *wc)
|
||||
}
|
||||
}
|
||||
/* try a binary compare */
|
||||
if (memeq(t_dn.ptr, o_dn.ptr, t_dn.len))
|
||||
if (chunk_equals(t_dn, o_dn))
|
||||
{
|
||||
return TRUE;
|
||||
}
|
||||
|
||||
Reference in New Issue
Block a user