Feeling Lucky
?
[#7754] - Use hash_equals for constant-time string comparison
- Closed
- 17 Oct 2015
- Medium
- Build: staging
- # 7754
- Diff
- zero-24:hash_equals
- Success The Travis CI build passed Details
User tests: Successful: Unsuccessful:
This PR fixes the Codestyle Issues and replaces: #4206 add kudos goes to @dunglas
@committer please mention @dunglas on commit. Thanks
Use the hash_equals function (introduced in PHP 5.6) for timing attack safe string comparison when available.
Add in the DocBlock that length will leak (see php/php-src#792).
| Status | New | ⇒ | Pending |
joomla-cms-bot
- | Labels |
Added:
?
|
||
| Category | ⇒ | Libraries |
| Status | Pending | ⇒ | Closed |
| Closed_Date | 0000-00-00 00:00:00 | ⇒ | 2015-10-17 22:27:50 |
| Closed_By | ⇒ | zero-24 |
Closing because there is no interest. :(