libmicrohttpd

commit eb3725dc3a50416bb46455c744d0c44351b00df9
parent a00142f00480a34990298cb6d8ef299ccb19d8cd
Author: Evgeny Grin (Karlson2k) <k2k@narod.ru>
Date:   Thu, 25 Jul 2024 15:22:44 +0200

digestauth: explicitly reject unsupported algorithm requested by application

Diffstat:
M
src/microhttpd/digestauth.c
 | 
3
++-

1 file changed, 2 insertions(+), 1 deletion(-)
diff --git a/src/microhttpd/digestauth.c b/src/microhttpd/digestauth.c
@@ -3537,7 +3537,8 @@ queue_auth_required_response3_inner (struct MHD_Connection *connection,
   size_t p; /* The position in the buffer */
   char *hdr_name;
 
-  if (0 == (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_NON_SESSION))
+  if ((0 == (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_NON_SESSION)) ||
+      (0 != (((unsigned int) malgo3) & MHD_DIGEST_AUTH_ALGO3_SESSION)))
   {
 #ifdef HAVE_MESSAGES
     MHD_DLOG (connection->daemon,