diff -up ntp-4.2.6p5/libntp/a_md5encrypt.c.cve-2016-1550 ntp-4.2.6p5/libntp/a_md5encrypt.c --- ntp-4.2.6p5/libntp/a_md5encrypt.c.cve-2016-1550 2016-04-27 15:11:40.955168086 +0200 +++ ntp-4.2.6p5/libntp/a_md5encrypt.c 2016-04-27 15:13:41.126499861 +0200 @@ -88,7 +88,7 @@ MD5authdecrypt( "MAC decrypt: MAC length error"); return (0); } - return (!memcmp(digest, (char *)pkt + length + 4, len)); + return (!CRYPTO_memcmp(digest, (char *)pkt + length + 4, len)); } /* diff -up ntp-4.2.6p5/sntp/crypto.c.cve-2016-1550 ntp-4.2.6p5/sntp/crypto.c --- ntp-4.2.6p5/sntp/crypto.c.cve-2016-1550 2010-11-14 09:47:00.000000000 +0100 +++ ntp-4.2.6p5/sntp/crypto.c 2016-04-27 15:13:41.126499861 +0200 @@ -58,7 +58,7 @@ auth_md5( if (!hash_len) authentic = FALSE; else - authentic = !memcmp(digest, pkt_data + pkt_size + 4, + authentic = !CRYPTO_memcmp(digest, pkt_data + pkt_size + 4, hash_len); return authentic; }