mirror of
https://github.com/open62541/open62541.git
synced 2026-10-17 04:42:09 +08:00
a0d58fca9e
Add check_hmac_verify_constanttime, exercising the OpenSSL HMAC-SHA1/SHA256 verify helpers directly. A correct signature must verify, a same-length signature with one flipped bit must be rejected (guards the constant-time comparison), and a signature shorter than the expected digest must be rejected without reading past its end (guards the length check). The AddressSanitizer job in CI will catch a regression of the latter. Internal Vulnerability Advisory: open62541-SA-2026-0038