Fix bizarre `if (!consttime_memeq(X, Y, N)!=0)' idioms.

[secnet.git] / transform-cbcmac.c

diff --git a/transform-cbcmac.c b/transform-cbcmac.c
index 5e59e212c71857a922459df8e55878299401be40..ad9e901ac332094d9dc0e116493b7855d10ecee7 100644 (file)
--- a/transform-cbcmac.c
+++ b/transform-cbcmac.c
@@ -231,7 +231,7 @@ static transform_apply_return transform_reverse(void *sst,
        serpentbe_encrypt(&ti->mackey,macplain,macacc);
     }
     serpentbe_encrypt(&ti->mackey,macacc,macacc);
        serpentbe_encrypt(&ti->mackey,macplain,macacc);
     }
     serpentbe_encrypt(&ti->mackey,macacc,macacc);

-    if (!consttime_memeq(macexpected,macacc,16)!=0) {
+    if (!consttime_memeq(macexpected,macacc,16)) {

        *errmsg="invalid MAC";
        return transform_apply_err;
     }
        *errmsg="invalid MAC";
        return transform_apply_err;
     }