[issue14532] multiprocessing module performs a time-dependent hmac comparison

[STINNER Victor]

STINNER Victor <victor.stinner at gmail.com> added the comment:

+def time_independent_equals(a, b):
+    if len(a) != len(b):
+        return False

This is not time independent. Is it an issue?

+    if type(a[0]) is int:

It's better to write isinstance(a, bytes). You should raise a
TypeError if a is not a bytes or str.

----------

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________