[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[libmicrohttpd] 04/05: gen_auth: do not allow the equal sign alone for d
From: |
gnunet |
Subject: |
[libmicrohttpd] 04/05: gen_auth: do not allow the equal sign alone for digest auth |
Date: |
Sun, 05 Jun 2022 12:08:02 +0200 |
This is an automated email from the git hooks/post-receive script.
karlson2k pushed a commit to branch master
in repository libmicrohttpd.
commit 8a2da6d6a3b7ab04b3bd0506d0f245997bb49b52
Author: Evgeny Grin (Karlson2k) <k2k@narod.ru>
AuthorDate: Sun Jun 5 12:24:34 2022 +0300
gen_auth: do not allow the equal sign alone for digest auth
---
src/microhttpd/gen_auth.c | 2 ++
1 file changed, 2 insertions(+)
diff --git a/src/microhttpd/gen_auth.c b/src/microhttpd/gen_auth.c
index 04894d9a..2cab478b 100644
--- a/src/microhttpd/gen_auth.c
+++ b/src/microhttpd/gen_auth.c
@@ -175,6 +175,8 @@ parse_dauth_params (const char *str,
mhd_assert ('\t' != str[i]);
left = str_len - i;
+ if ('=' == str[i])
+ return false; /* The equal sign is not allowed as the first character */
for (p = 0; p < sizeof(map) / sizeof(map[0]); p++)
{
struct dauth_token_param *const aparam = map + p;
--
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.