Commit 6934766c authored by Pieter Hintjens's avatar Pieter Hintjens

Merge pull request #695 from hurtonm/master

Stop curve handshake when cookie box verification fails
parents 21129c75 88882e31
...@@ -371,7 +371,7 @@ int zmq::curve_server_t::process_initiate (msg_t *msg_) ...@@ -371,7 +371,7 @@ int zmq::curve_server_t::process_initiate (msg_t *msg_)
// Check cookie plain text is as expected [C' + s'] // Check cookie plain text is as expected [C' + s']
if (memcmp (cookie_plaintext + crypto_secretbox_ZEROBYTES, cn_client, 32) if (memcmp (cookie_plaintext + crypto_secretbox_ZEROBYTES, cn_client, 32)
|| memcmp (cookie_plaintext + crypto_secretbox_ZEROBYTES + 32, cn_secret, 32)) { || memcmp (cookie_plaintext + crypto_secretbox_ZEROBYTES + 32, cn_secret, 32)) {
errno = EAGAIN; errno = EPROTO;
return -1; return -1;
} }
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment