use timingsafe_bcmp and get rid of now unused safe.c

usr.bin/dig/dighost.c

···
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: dighost.c,v 1.24 2020/02/25 17:01:56 deraadt Exp $ */
+/* $Id: dighost.c,v 1.25 2020/02/25 18:10:17 florian Exp $ */
 
 /*! \file
  *  \note
···
 #include <isc/netaddr.h>
 #include <isc/parseint.h>
 #include <isc/result.h>
-#include <isc/safe.h>
 #include <isc/serial.h>
 #include <isc/sockaddr.h>
 #include <isc/task.h>
···
 
 	INSIST(msg->sitok == 0 && msg->sitbad == 0);
 	if (optlen >= len && optlen >= 8U) {
-		if (isc_safe_memequal(isc_buffer_current(optbuf), sit, 8)) {
+		if (timingsafe_bcmp(isc_buffer_current(optbuf), sit, 8) == 0) {
 			msg->sitok = 1;
 		} else {
 			printf(";; Warning: SIT client cookie mismatch\n");

usr.bin/dig/lib/dns/dst_api.c

···
 
 /*
  * Principal Author: Brian Wellington
- * $Id: dst_api.c,v 1.14 2020/02/25 17:06:08 deraadt Exp $
+ * $Id: dst_api.c,v 1.15 2020/02/25 18:10:17 florian Exp $
  */
 
 /*! \file */
 #include <stdlib.h>
+#include <string.h>
 
 #include <isc/buffer.h>
 #include <isc/refcount.h>
-#include <isc/safe.h>
-#include <string.h>
 #include <isc/util.h>
 
 #include <dns/keyvalues.h>

usr.bin/dig/lib/dns/hmac_link.c

···
 
 /*
  * Principal Author: Brian Wellington
- * $Id: hmac_link.c,v 1.8 2020/02/25 17:06:08 deraadt Exp $
+ * $Id: hmac_link.c,v 1.9 2020/02/25 18:10:17 florian Exp $
  */
 
 #include <string.h>
···
 #include <isc/buffer.h>
 #include <isc/hmacsha.h>
 #include <isc/sha1.h>
-#include <isc/safe.h>
 #include <isc/util.h>
 
 #include <dst/result.h>

usr.bin/dig/lib/isc/Makefile.inc

···
-#	$OpenBSD: Makefile.inc,v 1.5 2020/02/24 15:09:14 jsg Exp $
+#	$OpenBSD: Makefile.inc,v 1.6 2020/02/25 18:10:17 florian Exp $
 
 .PATH: ${.CURDIR}/lib/isc
 
···
 SRCS+=	error.c event.c hash.c heap.c hex.c hmacsha.c
 SRCS+=	lex.c log.c regex.c sockaddr.c
 SRCS+=	task.c result.c parseint.c refcount.c timer.c
-SRCS+=	safe.c serial.c sha1.c sha2.c symtab.c
+SRCS+=	serial.c sha1.c sha2.c symtab.c
 
 

usr.bin/dig/lib/isc/hmacsha.c

···
  * PERFORMANCE OF THIS SOFTWARE.
  */
 
-/* $Id: hmacsha.c,v 1.5 2020/02/25 16:54:24 deraadt Exp $ */
+/* $Id: hmacsha.c,v 1.6 2020/02/25 18:10:17 florian Exp $ */
 
 /*
  * This code implements the HMAC-SHA1, HMAC-SHA224, HMAC-SHA256, HMAC-SHA384
···
  * draft-ietf-dnsext-tsig-sha-01.txt.
  */
 
+#include <string.h>
+
 #include <isc/hmacsha.h>
-
-#include <isc/safe.h>
 #include <isc/sha1.h>
 #include <isc/sha2.h>
-#include <string.h>
 #include <isc/util.h>
 
 void
···
 
 	REQUIRE(len <= ISC_SHA1_DIGESTLENGTH);
 	isc_hmacsha1_sign(ctx, newdigest, ISC_SHA1_DIGESTLENGTH);
-	return (isc_safe_memequal(digest, newdigest, len));
+	return (ISC_TF(timingsafe_bcmp(digest, newdigest, len) == 0));
 }
 
 /*
···
 
 	REQUIRE(len <= ISC_SHA224_DIGESTLENGTH);
 	isc_hmacsha224_sign(ctx, newdigest, ISC_SHA224_DIGESTLENGTH);
-	return (isc_safe_memequal(digest, newdigest, len));
+	return (ISC_TF(timingsafe_bcmp(digest, newdigest, len) == 0));
 }
 
 /*
···
 
 	REQUIRE(len <= ISC_SHA256_DIGESTLENGTH);
 	isc_hmacsha256_sign(ctx, newdigest, ISC_SHA256_DIGESTLENGTH);
-	return (isc_safe_memequal(digest, newdigest, len));
+	return (ISC_TF(timingsafe_bcmp(digest, newdigest, len) == 0));
 }
 
 /*
···
 
 	REQUIRE(len <= ISC_SHA384_DIGESTLENGTH);
 	isc_hmacsha384_sign(ctx, newdigest, ISC_SHA384_DIGESTLENGTH);
-	return (isc_safe_memequal(digest, newdigest, len));
+	return (ISC_TF(timingsafe_bcmp(digest, newdigest, len) == 0));
 }
 
 /*
···
 
 	REQUIRE(len <= ISC_SHA512_DIGESTLENGTH);
 	isc_hmacsha512_sign(ctx, newdigest, ISC_SHA512_DIGESTLENGTH);
-	return (isc_safe_memequal(digest, newdigest, len));
+	return (ISC_TF(timingsafe_bcmp(digest, newdigest, len) == 0));
 }

usr.bin/dig/lib/isc/include/isc/safe.h

···
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
- * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
- * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
- * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
- * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
- * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-/* $Id: safe.h,v 1.4 2020/02/25 16:54:24 deraadt Exp $ */
-
-#ifndef ISC_SAFE_H
-#define ISC_SAFE_H 1
-
-/*! \file isc/safe.h */
-
-#include <isc/types.h>
-#include <stdlib.h>
-
-isc_boolean_t
-isc_safe_memequal(const void *s1, const void *s2, size_t n);
-/*%<
- * Returns ISC_TRUE iff. two blocks of memory are equal, otherwise
- * ISC_FALSE.
- *
- */
-
-#endif /* ISC_SAFE_H */

usr.bin/dig/lib/isc/safe.c

···
-/*
- * Copyright (C) Internet Systems Consortium, Inc. ("ISC")
- *
- * Permission to use, copy, modify, and/or distribute this software for any
- * purpose with or without fee is hereby granted, provided that the above
- * copyright notice and this permission notice appear in all copies.
- *
- * THE SOFTWARE IS PROVIDED "AS IS" AND ISC DISCLAIMS ALL WARRANTIES WITH
- * REGARD TO THIS SOFTWARE INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY
- * AND FITNESS.  IN NO EVENT SHALL ISC BE LIABLE FOR ANY SPECIAL, DIRECT,
- * INDIRECT, OR CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM
- * LOSS OF USE, DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE
- * OR OTHER TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-/*! \file */
-
-#include <string.h>
-
-#include <isc/safe.h>
-
-isc_boolean_t
-isc_safe_memequal(const void *s1, const void *s2, size_t n) {
-	uint8_t acc = 0;
-
-	if (n != 0U) {
-		const uint8_t *p1 = s1, *p2 = s2;
-
-		do {
-			acc |= *p1++ ^ *p2++;
-		} while (--n != 0U);
-	}
-	return (ISC_TF(acc == 0));
-}