3 people d15c14ec6a avoid potential timing attack when validating SHA256 credentials (#5961) ...

The == operator is vulnerable to timing attacks as it short-circuits on a mismatch. Use
ConstantTimeCompare to avoid this vector.

Co-authored-by: Tristan Matthews <tmatth@videolan.org>

2026-07-19 09:46:34 +02:00

..

decrypt

allow setting rpiCameraSaturation to 0 (#1651) (#1772)

2023-05-06 23:00:42 +02:00

env

prevent truncation of 64-bit values on 32-bit platforms (#5902)

2026-06-28 11:37:14 +02:00

jsonwrapper

bump golangci-lint to 2.12.2 (#5727)

2026-05-10 17:54:18 +02:00

yamlwrapper

replace YAML parser (#5461)

2026-02-12 15:51:14 +01:00

always_available_track_codec.go

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00

always_available_track.go

api: add missing enums and move all enums in dedicated components (#5576)

2026-03-15 22:09:00 +01:00

auth_action.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

auth_internal_user_permission.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

auth_internal_user.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

auth_method.go

add always available streams (#5335)

2026-01-31 14:44:58 +01:00

conf_test.go

rtsp: restrict UDP port range to 32768-60999 (#5398) (#5958)

2026-07-18 20:59:33 +02:00

conf.go

moq: rename moqHTTPS2Address into moqHTTP2Address, moqHTTPS3Address into moqHTTP3Address (#5841)

2026-06-07 16:34:37 +02:00

credential_test.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

credential.go

avoid potential timing attack when validating SHA256 credentials (#5961)

2026-07-19 09:46:34 +02:00

duration_test.go

accept durations expressed as days (i.e. '1d') (#4094)

2025-01-02 12:44:15 +01:00

duration.go

warn users when non-existent fields are used in conf (#4261)

2025-02-18 15:23:44 +01:00

encryption.go

add always available streams (#5335)

2026-01-31 14:44:58 +01:00

global.go

update golangci-lint configuration (#5182)

2025-11-11 23:57:52 +01:00

hls_variant.go

warn users when non-existent fields are used in conf (#4261)

2025-02-18 15:23:44 +01:00

ip_network.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

ip_networks.go

fix clearing lists with environment variables (#5410) (#5924)

2026-07-18 10:56:46 +02:00

log_destination.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

log_destinations.go

fix clearing lists with environment variables (#5410) (#5924)

2026-07-18 10:56:46 +02:00

log_level.go

warn users when non-existent fields are used in conf (#4261)

2025-02-18 15:23:44 +01:00

optional_global.go

update golangci-lint configuration (#5182)

2025-11-11 23:57:52 +01:00

optional_path.go

update golangci-lint configuration (#5182)

2025-11-11 23:57:52 +01:00

path_test.go

modernize code (#5814)

2026-05-31 20:33:48 +02:00

path.go

rtsp: restrict UDP port range to 32768-60999 (#5398) (#5958)

2026-07-18 20:59:33 +02:00

record_format.go

add always available streams (#5335)

2026-01-31 14:44:58 +01:00

rtsp_auth_method.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00

rtsp_auth_methods.go

fix clearing lists with environment variables (#5410) (#5924)

2026-07-18 10:56:46 +02:00

rtsp_range_type.go

add always available streams (#5335)

2026-01-31 14:44:58 +01:00

rtsp_transport.go

modernize code (#5814)

2026-05-31 20:33:48 +02:00

rtsp_transports.go

fix clearing lists with environment variables (#5410) (#5924)

2026-07-18 10:56:46 +02:00

string_size.go

warn users when non-existent fields are used in conf (#4261)

2025-02-18 15:23:44 +01:00

webrtc_ice_server.go

simplify configuration definitions (#5376)

2026-01-25 20:24:41 +01:00