mptcp/openmptcprouter-vps-admin
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-vps-admin.git synced 2025-03-09 15:40:05 +00:00
Code Issues Releases Wiki Activity

Fix timing attacks potential vulnerability

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2021-04-08 17:37:19 +02:00
parent 2694612565
commit a01cbc8c3d
1 changed files with 1 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

2
omr-admin.py
View file

@ -776,7 +776,7 @@ with open('/etc/openmptcprouter-vps-admin/omr-admin-config.json') as f:
fake_users_db = omr_config_data['users'][0] fake_users_db = omr_config_data['users'][0]
def verify_password(plain_password, user_password): def verify_password(plain_password, user_password):
if plain_password == user_password: if secrets.compare_digest(plain_password,user_password):
LOG.debug("password true") LOG.debug("password true")
return True return True
return False return False