Log in / Register
OpenStack Security Advisory
Overview
Code
Bugs
Blueprints
Translations
Answers
Bug #1325128
Comment #5
Comment 5 for bug 1325128
Revision history for this message
Russell Bryant (russellb)
wrote
on 2014-06-10
:
Re: nova metadata does not use a constant time compare for validating an HMAC token
#5
0001-Avoid-possible-timing-attack-in-metadata-api.patch
Edit
(3.0 KiB, text/plain)
The fix should be something like this ... though not tested
The fix should be something like this ... though not tested
The fix should be something like this ... though not tested