[issue14532] multiprocessing module performs a time-dependent hmac comparison

Jon Oberheide report at bugs.python.org
Thu Apr 12 23:23:42 CEST 2012


Jon Oberheide <jon at oberheide.org> added the comment:

Here's a v2 patch. Changes include checking the input types via isinstance, test cases to exercise the type checking, and a note documenting the leak of the input length.

----------
Added file: http://bugs.python.org/file25197/hmac-time-independent-v2.patch

_______________________________________
Python tracker <report at bugs.python.org>
<http://bugs.python.org/issue14532>
_______________________________________


More information about the Python-bugs-list mailing list