RomkaZVO/xash3d-fwgs
1
0
Fork 0
mirror of https://github.com/FWGS/xash3d-fwgs.git synced 2026-08-08 13:21:51 +08:00
Code Issues Packages Projects Releases Wiki Activity

engine: server: also use constant time string comparison for sv_password

Browse Source
This commit is contained in:
Alibek Omarov
2026-05-17 11:26:53 +05:00
parent c2c781f039
commit cb04e9cbd5
1 changed files with 1 additions and 1 deletions
Download Patch File Download Diff File Expand all files Collapse all files

2
engine/server/sv_client.c
View File

@@ -361,7 +361,7 @@ static void SV_ConnectClient( netadr_t from )
// check connection password (don't verify local client)
if( !NET_IsLocalAddress( from ) && SV_HavePassword( ))
{
if( Q_stricmp( sv_password.string, Info_ValueForKey( userinfo, "password" )))
if( Q_strcmp_constant_time( sv_password.string, Info_ValueForKey( userinfo, "password" )))
{
SV_RejectConnection( from, "invalid password\n" );
return;