identification: Properly check length before comparing for binary DN equality

Fixes CVE-2013-6075.
This commit is contained in:
Martin Willi
2013-10-31 21:57:07 +01:00
committed by Andreas Steffen
parent ed3eb62723
commit 7f4a13fffb
+1 -1
View File
@@ -602,7 +602,7 @@ static bool compare_dn(chunk_t t_dn, chunk_t o_dn, int *wc)
} }
} }
/* try a binary compare */ /* try a binary compare */
if (memeq(t_dn.ptr, o_dn.ptr, t_dn.len)) if (chunk_equals(t_dn, o_dn))
{ {
return TRUE; return TRUE;
} }