identification: Properly check length before comparing for binary DN equality

Fixes CVE-2013-6075.

diff --git a/src/libstrongswan/utils/identification.c b/src/libstrongswan/utils/identification.c
index 5df3e5f..9c43ad5 100644 (file)
--- a/src/libstrongswan/utils/identification.c
+++ b/src/libstrongswan/utils/identification.c
@@ -602,7 +602,7 @@ static bool compare_dn(chunk_t t_dn, chunk_t o_dn, int *wc)
                }
        }
        /* try a binary compare */
-       if (memeq(t_dn.ptr, o_dn.ptr, t_dn.len))
+       if (chunk_equals(t_dn, o_dn))
        {
                return TRUE;
        }