X-Git-Url: https://git.distorted.org.uk/~mdw/tripe/blobdiff_plain/35c8b547dde529693875087d67fa60bf88319d2b..fe182f617126cb792a6d5867440105f9f10910b4:/server/chal.c

diff --git a/server/chal.c b/server/chal.c
index 12b64e21..387f0db1 100644
--- a/server/chal.c
+++ b/server/chal.c
@@ -117,14 +117,14 @@ int c_check(buf *b)
   }
   h = GM_INIT(mac);
   GH_HASH(h, p, 4);
-  ok = (memcmp(GH_DONE(h, 0), p + 4, master->algs.tagsz) == 0);
+  ok = ct_memeq(GH_DONE(h, 0), p + 4, master->algs.tagsz);
   GH_DESTROY(h);
   if (!ok) {
     a_warn("CHAL", "incorrect-tag", A_END);
     goto fail;
   }
   seq = LOAD32(p);
-  if (seq_check(&iseq, LOAD32(p), "CHAL"))
+  if (seq_check(&iseq, seq, "CHAL"))
     goto fail;
   T( trace(T_CHAL, "chal: checked challenge %lu", (unsigned long)seq); )
   return (0);