moparisthebest/curl
1
0
Fork 0
mirror of https://github.com/moparisthebest/curl synced 2024-12-22 16:18:48 -05:00
Code Issues Releases Wiki Activity

Jose Kahan pointed out a Digest server that provided the algorith last in the

Browse Source 
header line without quotes and with a CRLF immediately following...
This commit is contained in:
Daniel Stenberg 2007-02-26 22:03:01 +00:00
parent ee1235a7cd
commit 7444342675
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
lib/http_digest.c
View File

@ -101,8 +101,8 @@ CURLdigest Curl_input_digest(struct connectdata *conn,
if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"", if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"",
value, content)) || value, content)) ||
/* try the same scan but without quotes around the content but don't /* try the same scan but without quotes around the content but don't
include the possibly trailing comma */ include the possibly trailing comma, newline or carriage return */
(2 == sscanf(header, "%31[^=]=%127[^,]", (2 == sscanf(header, "%31[^=]=%127[^\r\n,]",
value, content)) ) { value, content)) ) {
if(strequal(value, "nonce")) { if(strequal(value, "nonce")) {
d->nonce = strdup(content); d->nonce = strdup(content);