From 647ed7c78b3e514c6d98e57d7f5ec8af57b41915 Mon Sep 17 00:00:00 2001 From: "Evgeny Grin (Karlson2k)" Date: Sun, 3 Jul 2022 17:58:50 +0300 Subject: [PATCH] digest: fix missing increment of 'nc' value for auth-int - Increment nc regardless of qop type. Prior to this change nc was only incremented for qop type auth even though libcurl sends nc with any qop. Closes https://github.com/curl/curl/pull/9090 --- lib/vauth/digest.c | 6 ++---- 1 file changed, 2 insertions(+), 4 deletions(-) diff --git a/lib/vauth/digest.c b/lib/vauth/digest.c index 16171b0210..0c18fdc7ce 100644 --- a/lib/vauth/digest.c +++ b/lib/vauth/digest.c @@ -850,10 +850,8 @@ static CURLcode auth_create_digest_http_message( digest->qop, request_digest); - if(strcasecompare(digest->qop, "auth")) - digest->nc++; /* The nc (from RFC) has to be a 8 hex digit number 0 - padded which tells to the server how many times you are - using the same nonce in the qop=auth mode */ + /* Increment nonce-count to use another nc value for the next request */ + digest->nc++; } else { response = aprintf("username=\"%s\", "