CVE-2022-3437 third_party/heimdal: Use constant-time memcmp() for arcfour unwrap
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Wed, 12 Oct 2022 00:57:13 +0000 (13:57 +1300)
committerJule Anger <janger@samba.org>
Mon, 24 Oct 2022 05:27:37 +0000 (07:27 +0200)
commite3c314ed69f99db1c797772fbda83820352d5387
tree9a11e122ab9238cd8fc4a8d693f08878c81b5638
parent03eefa45d38ca3eade2018767421bb60ba65d58b
CVE-2022-3437 third_party/heimdal: Use constant-time memcmp() for arcfour unwrap

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15134

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
third_party/heimdal/lib/gssapi/krb5/arcfour.c