From 27a650e822969495f94071b846a334e869f3145b Mon Sep 17 00:00:00 2001 From: Arne Beer Date: Tue, 11 Jul 2023 21:24:40 +0200 Subject: [PATCH] fix: Wrong secret timeout --- pueue/src/daemon/network/socket.rs | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/pueue/src/daemon/network/socket.rs b/pueue/src/daemon/network/socket.rs index 1220a981..c5646b03 100644 --- a/pueue/src/daemon/network/socket.rs +++ b/pueue/src/daemon/network/socket.rs @@ -76,14 +76,14 @@ async fn handle_incoming( let start = SystemTime::now(); - // Return immediately, if we got a wrong secret from the client. + // Return if we got a wrong secret from the client. if payload_bytes != secret { let received_secret = String::from_utf8(payload_bytes)?; warn!("Received invalid secret: {received_secret}"); // Wait for 1 second before closing the socket, when getting a invalid secret. // This invalidates any timing attacks. - let remaining_sleep_time = Duration::from_millis(1) + let remaining_sleep_time = Duration::from_secs(1) - SystemTime::now() .duration_since(start) .context("Couldn't calculate duration. Did the system time change?")?;