Merge pull request #9900 from julek-wolfssl/fenrir/357

douzzer · web-flow · commit 313d27df15ea · 2026-03-06T22:21:44.000-06:00
Use ConstantCompare in EchCheckAcceptance
diff --git a/src/tls13.c b/src/tls13.c
@@ -4949,7 +4949,7 @@ static int EchCheckAcceptance(WOLFSSL* ssl, byte* label, word16 labelSz,
     }
     if (ret == 0) {
         /* last 8 bytes should match our expand output */
-        ret = XMEMCMP(acceptConfirmation, input + acceptOffset,
+        ret = ConstantCompare(acceptConfirmation, input + acceptOffset,
             ECH_ACCEPT_CONFIRMATION_SZ);
         /* ech accepted */
         if (ret == 0) {

Original file line number	Diff line number	Diff line change
`@@ -4949,7 +4949,7 @@ static int EchCheckAcceptance(WOLFSSL* ssl, byte* label, word16 labelSz,`
`4949`	`4949`	`}`
`4950`	`4950`	`if (ret == 0) {`
`4951`	`4951`	`/* last 8 bytes should match our expand output */`
`4952`		`- ret = XMEMCMP(acceptConfirmation, input + acceptOffset,`
	`4952`	`+ ret = ConstantCompare(acceptConfirmation, input + acceptOffset,`
`4953`	`4953`	`ECH_ACCEPT_CONFIRMATION_SZ);`
`4954`	`4954`	`/* ech accepted */`
`4955`	`4955`	`if (ret == 0) {`