mptcp/openmptcprouter-vps-admin
1
0
Fork 0
mirror of https://github.com/Ysurac/openmptcprouter-vps-admin.git synced 2025-02-12 18:41:52 +00:00
Code Issues Releases Wiki Activity

Fix timing attacks potential vulnerability

Browse source
This commit is contained in:
Ycarus (Yannick Chabanois) 2021-04-08 17:37:19 +02:00
parent 2694612565
commit a01cbc8c3d
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
omr-admin.py
View file

@ -776,7 +776,7 @@ with open('/etc/openmptcprouter-vps-admin/omr-admin-config.json') as f:
fake_users_db = omr_config_data['users'][0]
def verify_password(plain_password, user_password):
if plain_password == user_password:
if secrets.compare_digest(plain_password,user_password):
LOG.debug("password true")
return True
return False