without overthinking it, replace a few memcmp calls with CRYPTO_memcmp

where it is feasible to do so. better safe than sorry.

1 files changed, 1 insertions, 1 deletions

diff --git a/src/lib/libssl/s3_srvr.c b/src/lib/libssl/s3_srvr.c
index f12b680e99..948569a156 100644
--- a/src/lib/libssl/s3_srvr.c
+++ b/src/lib/libssl/s3_srvr.c
@@ -1025,7 +1025,7 @@ ssl3_get_client_hello(SSL *s)
                                         goto f_err;
                                 }
                                 /* else cookie verification succeeded */
-                        } else if (memcmp(s->d1->rcvd_cookie, s->d1->cookie,
+                        } else if (CRYPTO_memcmp(s->d1->rcvd_cookie, s->d1->cookie,
                             s->d1->cookie_len) != 0) {
                                 /* default verification */
                                 al = SSL_AD_HANDSHAKE_FAILURE;