Skip to content

Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification#3060

Merged
torben-hansen merged 1 commit intoaws:mainfrom
torben-hansen:fix_GHSA-frmv-5gcm-jwxh
Mar 2, 2026
Merged

Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification#3060
torben-hansen merged 1 commit intoaws:mainfrom
torben-hansen:fix_GHSA-frmv-5gcm-jwxh

Conversation

@torben-hansen
Copy link
Copy Markdown
Contributor

Issues:

P386862509

Description of changes:

Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license and the ISC license.

@torben-hansen torben-hansen requested a review from a team as a code owner March 2, 2026 19:41
@torben-hansen torben-hansen merged commit 2ad9f36 into aws:main Mar 2, 2026
294 of 307 checks passed
torben-hansen added a commit to torben-hansen/aws-lc that referenced this pull request Mar 2, 2026
…#3060)

Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification.
@codecov-commenter
Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 78.34%. Comparing base (80189ff) to head (27eff91).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff             @@
##             main    #3060      +/-   ##
==========================================
- Coverage   78.35%   78.34%   -0.02%     
==========================================
  Files         689      689              
  Lines      121026   121025       -1     
  Branches    16966    16965       -1     
==========================================
- Hits        94833    94813      -20     
- Misses      25296    25317      +21     
+ Partials      897      895       -2     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

torben-hansen added a commit that referenced this pull request Mar 2, 2026
Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification.
nebeid pushed a commit to nebeid/aws-lc that referenced this pull request Mar 23, 2026
…#3060)

Use CRYPTO_memcmp instead of OPENSSL_memcmp for tag verification.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants