Jose Kahan pointed out a Digest server that provided the algorith last in the

header line without quotes and with a CRLF immediately following...
This commit is contained in:
Daniel Stenberg 2007-02-26 22:03:01 +00:00
parent ee1235a7cd
commit 7444342675

View File

@ -101,8 +101,8 @@ CURLdigest Curl_input_digest(struct connectdata *conn,
if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"",
value, content)) ||
/* try the same scan but without quotes around the content but don't
include the possibly trailing comma */
(2 == sscanf(header, "%31[^=]=%127[^,]",
include the possibly trailing comma, newline or carriage return */
(2 == sscanf(header, "%31[^=]=%127[^\r\n,]",
value, content)) ) {
if(strequal(value, "nonce")) {
d->nonce = strdup(content);