Skip to content

Commit d3c47d1

Browse files
committed
fix elf image digest comparison timing
F/730
1 parent 953c9be commit d3c47d1

1 file changed

Lines changed: 1 addition & 1 deletion

File tree

src/image.c

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1989,7 +1989,7 @@ int wolfBoot_check_flash_image_elf(uint8_t part, unsigned long* entry_out)
19891989

19901990
/* Finalize SHA calculation */
19911991
final_hash(&ctx, calc_digest);
1992-
if (memcmp(calc_digest, exp_digest, WOLFBOOT_SHA_DIGEST_SIZE) != 0) {
1992+
if (!image_CT_compare(exp_digest, calc_digest, WOLFBOOT_SHA_DIGEST_SIZE)) {
19931993
wolfBoot_printf("ELF: [CHECK] SHA verification FAILED\n");
19941994
wolfBoot_printf(
19951995
"ELF: [CHECK] Expected %02x%02x%02x%02x%02x%02x%02x%02x\n",

0 commit comments

Comments
 (0)