OpenStack Compute (nova)

Bug #1325128
Comment #5

Comment 5 for bug 1325128

Revision history for this message

Russell Bryant (russellb) wrote on 2014-06-10: Re: nova metadata does not use a constant time compare for validating an HMAC token

#5

0001-Avoid-possible-timing-attack-in-metadata-api.patch Edit (3.0 KiB, text/plain)

The fix should be something like this ... though not tested