Chromium Code Reviews| Index: net/third_party/nss/ssl/ssl3con.c |
| diff --git a/net/third_party/nss/ssl/ssl3con.c b/net/third_party/nss/ssl/ssl3con.c |
| index c2d9eeb4ec2a55617ead4ece7bfdda072b529004..ffc04df42f1bf17dae1ee442b2498d3e1955451f 100644 |
| --- a/net/third_party/nss/ssl/ssl3con.c |
| +++ b/net/third_party/nss/ssl/ssl3con.c |
| @@ -10712,7 +10712,7 @@ ssl3_SendEncryptedExtensions(sslSocket *ss) |
| spki = SECKEY_EncodeDERSubjectPublicKeyInfo(ss->ssl3.channelIDPub); |
| if (spki->len != sizeof(P256_SPKI_PREFIX) + CHANNEL_ID_PUBLIC_KEY_LENGTH || |
| - memcmp(spki->data, P256_SPKI_PREFIX, sizeof(P256_SPKI_PREFIX) != 0)) { |
|
wtc
2013/12/03 01:27:33
So we were comparing only one byte :-(
|
| + memcmp(spki->data, P256_SPKI_PREFIX, sizeof(P256_SPKI_PREFIX)) != 0) { |
| PORT_SetError(SSL_ERROR_INVALID_CHANNEL_ID_KEY); |
| rv = SECFailure; |
| goto loser; |