node_id_eq(const node_t *node1, const node_t *node2)
{
  return tor_memeq(node1->identity, node2->identity, DIGEST_LEN);
}

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.