openssl/openssl — pull request #102 by Dmitry-Me (2014-05-05 11:30:11+00:00)
Title: Prevent the compiler from converting "secure" memcmp() into canonical one.

Current implementation of "secure" memcmp() is not that secure - the compiler can use LTO and see that the calling code only tests for zero values and then convert it into canonical, not "secure" version.