CVE-2022-3437 third_party/heimdal: Use constant-time memcmp() for arcfour unwrap
commit16120b736f28e85e7b46f8c69b7aa02073b2e26c
authorJoseph Sutton <josephsutton@catalyst.net.nz>
Wed, 12 Oct 2022 00:57:13 +0000 (12 13:57 +1300)
committerJule Anger <janger@samba.org>
Tue, 25 Oct 2022 10:31:34 +0000 (25 10:31 +0000)
treed5d71afecdb8f3ae62a04795e809d38a35fb75c0
parentc8e85295c988d653c3c425e0c4b8900f30fa1bba
CVE-2022-3437 third_party/heimdal: Use constant-time memcmp() for arcfour unwrap

BUG: https://bugzilla.samba.org/show_bug.cgi?id=15134

Signed-off-by: Joseph Sutton <josephsutton@catalyst.net.nz>
Reviewed-by: Andrew Bartlett <abartlet@samba.org>
third_party/heimdal/lib/gssapi/krb5/arcfour.c