diff options
| author | Coda Hale <coda.hale@gmail.com> | 2009-08-13 10:03:08 -0700 |
|---|---|---|
| committer | Michael Koziarski <michael@koziarski.com> | 2009-09-04 09:25:38 +1200 |
| commit | 5e6dab8b34152bc48c89032d20e5bda1511e28fb (patch) | |
| tree | e07e5aaab885d847f4cdf7006b55fb0601d3b676 /activesupport/test/multibyte_utils_test.rb | |
| parent | bd97c3044a7b135f5b84f38c3dbdce2ccc793f70 (diff) | |
| download | rails-5e6dab8b34152bc48c89032d20e5bda1511e28fb.tar.gz rails-5e6dab8b34152bc48c89032d20e5bda1511e28fb.tar.bz2 rails-5e6dab8b34152bc48c89032d20e5bda1511e28fb.zip | |
Fix timing attack vulnerability in ActiveSupport::MessageVerifier.
Use a constant-time comparison algorithm to compare the candidate HMAC with the calculated HMAC to prevent leaking information about the calculated HMAC.
Signed-off-by: Michael Koziarski <michael@koziarski.com>
Diffstat (limited to 'activesupport/test/multibyte_utils_test.rb')
0 files changed, 0 insertions, 0 deletions