OpenStack Compute (nova)

  1. Bug #1325128
  2. Comment #30

Comment 30 for bug 1325128

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to nova (stable/icehouse)

Reviewed: https://review.openstack.org/107397
Committed: https://git.openstack.org/cgit/openstack/nova/commit/?id=9f59ca751f1a392ef24d8ab73a7bf5ce9655017e
Submitter: Jenkins
Branch: stable/icehouse

commit 9f59ca751f1a392ef24d8ab73a7bf5ce9655017e
Author: Grant Murphy <email address hidden>
Date: Tue Jul 8 03:35:40 2014 +0000

    Avoid possible timing attack in metadata api

    Introduce a constant time comparison function to
    nova utils for comparing authentication tokens.

    Conflicts:
     nova/utils.py

    Closes-bug: #1325128
    Change-Id: I7374f2edc6f03c7da59cf73ae91a87147e53d0de
    (cherry picked from commit 4a60c6a655006b2882331844664fac5cf67c5f34)