Bugs item #2126435, was opened at 2008-09-24 15:42
Message generated for change (Tracker Item Submitted) made by Item Submitter
You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2126435&group_id=976

Please note that this message will contain a full copy of the comment thread,
including the initial issue submission, for this request,
not just the latest update.
Category: libcurl
Group: wrong behaviour
Status: Open
Resolution: None
Priority: 5
Private: No
Submitted By: ema (pocoyo)
Assigned to: Daniel Stenberg (bagder)
Summary: wrong HTTP digest authentication with empty realm

Initial Comment:
if libcurl receives an empty realm field, libcurl computes a wrong md5 string. This happens because if the realm is an empty string the following line (line 101, file lib/http_digest.c):

      if((2 == sscanf(header, "%255[^=]=\"%1023[^\"]\"",
                      value, content)) ||

sets the content to """" instead of "".

This leads to a wrong md5 computation and curl is not able to send the correct authentication.

After the sscanf command I propose the following patch:

 if (!strcmp(content, "\"\""))
     strcpy(content, "");

bye

Emanuele

----------------------------------------------------------------------

You can respond by visiting:
https://sourceforge.net/tracker/?func=detail&atid=100976&aid=2126435&group_id=976
Received on 2008-09-24