← Commit list

81da4ee249

Joshua Rogers
Joshua Rogers
2026-05-19
SUCCESS Duration: 254s

Subject

vtls: use Curl_safecmp for CRLfile and pinned_key comparison

Binary

No binary (build failed)

Architecture & Compiler Flags

Architecture: x86_64-linux-gnu Compiler: gcc (Ubuntu 11.4.0-1ubuntu1~22.04.3) 11.4.0

—

Build Log

(log yok)

Commit Diff GitHub →

lib/vtls/vtls.c +2 -2
lib/vtls/vtls.c+2 -2
@@ -217,8 +217,8 @@ static bool match_ssl_primary_config(struct Curl_easy *data,
curl_strequal(c1->cipher_list13, c2->cipher_list13) &&
curl_strequal(c1->curves, c2->curves) &&
curl_strequal(c1->signature_algorithms, c2->signature_algorithms) &&
- curl_strequal(c1->CRLfile, c2->CRLfile) &&
- curl_strequal(c1->pinned_key, c2->pinned_key))
+ Curl_safecmp(c1->CRLfile, c2->CRLfile) &&
+ Curl_safecmp(c1->pinned_key, c2->pinned_key))
return TRUE;
return FALSE;