From 1e93fdcf882dc242a5a5ccdaa3c79b25cc557082 Mon Sep 17 00:00:00 2001 From: "Bruce A. Mah" Date: Tue, 2 Jan 2018 14:55:01 -0800 Subject: Fix comparison when checking for time skew when using authentication. (#674) Fixes #673. Submitted by @FuzzyStatic, reviewed by @ralcini. --- src/iperf_auth.c | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'src') diff --git a/src/iperf_auth.c b/src/iperf_auth.c index 5ba2e08..d0484e4 100644 --- a/src/iperf_auth.c +++ b/src/iperf_auth.c @@ -62,7 +62,7 @@ void sha256(const char *string, char outputBuffer[65]) int check_authentication(const char *username, const char *password, const time_t ts, const char *filename){ time_t t = time(NULL); time_t utc_seconds = mktime(localtime(&t)); - if ( (utc_seconds - ts) < 10 && (utc_seconds - ts) > 0 ){ + if ( (utc_seconds - ts) > 10 || (utc_seconds - ts) < -10 ) { return 1; } -- cgit v1.2.3