From ac6fd6218962bf60b86cdfa64b8f7110ffc35ad3 Mon Sep 17 00:00:00 2001 From: Adam Chlipala Date: Tue, 19 Jul 2011 09:18:50 -0400 Subject: Change cookie signature comparison to resist timing attacks (based on code suggested by Robin Green and Austin Seipp) --- include/urweb.h | 1 + 1 file changed, 1 insertion(+) (limited to 'include') diff --git a/include/urweb.h b/include/urweb.h index 9b68179a..1b10583f 100644 --- a/include/urweb.h +++ b/include/urweb.h @@ -230,6 +230,7 @@ uw_unit uw_Basis_setHeader(uw_context, uw_Basis_string name, uw_Basis_string val uw_Basis_string uw_unnull(uw_Basis_string); uw_Basis_string uw_Basis_makeSigString(uw_context, uw_Basis_string); +int uw_streq(uw_Basis_string, uw_Basis_string); uw_Basis_string uw_Basis_sigString(uw_context, uw_unit); uw_Basis_string uw_Basis_fileName(uw_context, uw_Basis_file); -- cgit v1.2.3