libmicrohttpd
[Top][All Lists]
Advanced

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[libmicrohttpd] Possible bug in digest auth with parameters without valu


From: Manuel Argüelles
Subject: [libmicrohttpd] Possible bug in digest auth with parameters without value
Date: Thu, 24 Sep 2015 22:36:37 -0500
User-agent: Mutt/1.5.23 (2014-03-12)

Hello,

I'm having problems with digest auth when the URL has parameters
without values, as long as it is not the last one. Attached a simple
example that shows the issue.

Requests that auth ok:

curl --digest 'http://demo:address@hidden:8080/?cmd'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name=value'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name'

Requests that fails to auth:

curl --digest 'http://demo:address@hidden:8080/?cmd&name=value'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name&valid'
curl --digest 'http://demo:address@hidden:8080/?cmd=yes&name&valid=y'

Tested with libmicrohttpd 0.9.42 (please forgive me if it was fixed
already)




Attachment: example.c
Description: Text document


reply via email to

[Prev in Thread] Current Thread [Next in Thread]