diff options
-rw-r--r-- | ChangeLog | 4 | ||||
-rw-r--r-- | src/daemon/digestauth.c | 2 |
2 files changed, 5 insertions, 1 deletions
@@ -1,3 +1,7 @@ | |||
1 | Sat Jan 7 17:30:48 CET 2012 | ||
2 | Digest authentication expects nonce count in base 16, not base 10 | ||
3 | (#2061). -tclaveirole | ||
4 | |||
1 | Thu Jan 5 22:01:37 CET 2012 | 5 | Thu Jan 5 22:01:37 CET 2012 |
2 | Partial fix for #2059, digest authentication with GET arguments. -CG | 6 | Partial fix for #2059, digest authentication with GET arguments. -CG |
3 | 7 | ||
diff --git a/src/daemon/digestauth.c b/src/daemon/digestauth.c index ca23925e..472811e8 100644 --- a/src/daemon/digestauth.c +++ b/src/daemon/digestauth.c | |||
@@ -551,7 +551,7 @@ MHD_digest_auth_check(struct MHD_Connection *connection, | |||
551 | (0 == lookup_sub_value(nc, sizeof (nc), header, "nc")) || | 551 | (0 == lookup_sub_value(nc, sizeof (nc), header, "nc")) || |
552 | (0 == lookup_sub_value(response, sizeof (response), header, "response")) ) | 552 | (0 == lookup_sub_value(response, sizeof (response), header, "response")) ) |
553 | return MHD_NO; | 553 | return MHD_NO; |
554 | nci = strtoul (nc, &end, 10); | 554 | nci = strtoul (nc, &end, 16); |
555 | if ( ('\0' != *end) || | 555 | if ( ('\0' != *end) || |
556 | ( (LONG_MAX == nci) && (errno == ERANGE) ) ) | 556 | ( (LONG_MAX == nci) && (errno == ERANGE) ) ) |
557 | return MHD_NO; /* invalid nonce */ | 557 | return MHD_NO; /* invalid nonce */ |