[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
[libmicrohttpd] Possible bug in digest auth with parameters without valu
From: |
Manuel Argüelles |
Subject: |
[libmicrohttpd] Possible bug in digest auth with parameters without value |
Date: |
Thu, 24 Sep 2015 22:36:37 -0500 |
User-agent: |
Mutt/1.5.23 (2014-03-12) |
Hello,
I'm having problems with digest auth when the URL has parameters
without values, as long as it is not the last one. Attached a simple
example that shows the issue.
Requests that auth ok:
curl --digest 'http://demo:address@hidden:8080/?cmd'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name=value'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name'
Requests that fails to auth:
curl --digest 'http://demo:address@hidden:8080/?cmd&name=value'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name&valid'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name&valid=y'
Tested with libmicrohttpd 0.9.42 (please forgive me if it was fixed
already)
example.c
Description: Text document
- [libmicrohttpd] Possible bug in digest auth with parameters without value,
Manuel Argüelles <=