Eric Covener
e66cbabeda
Merge r1933389 from trunk:
Add ap_*_timingsafe() constant-time comparison functions:
* include/httpd.h: Declare ap_memeq_timingsafe(), ap_streq_timingsafe(), ap_strneq_timingsafe().
* server/util.c: Implement, wrapping apr_*_timingsafe() if APR >= 1.8, with a fallback to copied-in versions.
* modules/aaa/mod_auth_digest.c: Replace apr_crypto_equals() with ap_memeq_timingsafe(). Remove apr_crypto.h include.
* modules/session/mod_session_crypto.c: Replace local ap_crypto_equals() with ap_memeq_timingsafe(). Remove the local implementation and macro alias.
* include/ap_mmn.h: Bump MMN minor.
Submitted by: jorton
Reviewed by: jorton, rpluem, covener
Github: closes #639
git-svn-id: https://svn.apache.org/repos/asf/httpd/httpd/branches/2.4.x@1933444 13f79535-47bb-0310-9956-ffa450edef68
2026-04-28 18:10:32 +00:00
..
1999-08-24 06:46:03 +00:00
Merged /httpd/httpd/trunk:r1515403,1515411,1515420,1517175,1521909,1526647,1541181,1578762,1585054,1585072,1588054
2014-04-16 20:44:14 +00:00
2000-04-30 00:06:07 +00:00
2018-03-09 09:19:44 +00:00
2016-03-23 03:53:49 +00:00
2012-12-14 12:20:04 +00:00
2016-04-07 15:04:27 +00:00
2016-08-25 12:48:18 +00:00
2016-03-23 03:53:49 +00:00
2010-10-16 10:16:18 +00:00
2016-04-07 15:04:27 +00:00
2024-03-27 14:33:00 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2026-04-28 18:10:32 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2021-01-19 19:29:43 +00:00
2016-03-23 03:53:49 +00:00
2008-06-07 02:10:32 +00:00
2016-04-07 15:04:27 +00:00
2015-11-18 16:15:29 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2023-01-09 13:16:50 +00:00
2016-03-23 03:53:49 +00:00
2012-12-14 12:20:04 +00:00
2016-04-07 15:04:27 +00:00
2022-02-24 20:43:21 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2022-03-04 09:30:28 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2013-05-23 14:35:33 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2026-04-26 16:29:24 +00:00
2016-03-23 03:53:49 +00:00
2012-12-14 12:20:04 +00:00
2016-04-07 15:04:27 +00:00
2024-04-03 12:10:49 +00:00
2016-03-23 03:53:49 +00:00
2015-03-27 20:44:55 +00:00
2016-04-07 15:04:27 +00:00
2025-01-07 15:04:23 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2020-01-14 17:39:25 +00:00
2016-03-23 03:53:49 +00:00
2012-12-14 12:20:04 +00:00
2016-04-07 15:04:27 +00:00
2022-06-02 20:02:50 +00:00
2016-03-23 03:53:49 +00:00
2007-08-24 00:09:38 +00:00
2011-09-23 13:38:09 +00:00
2016-04-07 15:04:27 +00:00
2022-03-04 09:30:28 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2021-04-18 19:11:48 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2018-03-09 09:19:44 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2015-05-23 10:16:25 +00:00
2016-03-23 03:53:49 +00:00
2007-08-24 00:09:38 +00:00
2015-05-23 10:16:25 +00:00
2016-04-07 15:04:27 +00:00
2014-01-21 16:45:04 +00:00
2016-03-23 03:53:49 +00:00
2007-01-11 05:37:20 +00:00
2016-04-07 15:04:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-03-18 03:09:27 +00:00
2011-10-29 18:36:40 +00:00