mirrors/libmicrohttpd
2
0
Fork 0
mirror of https://git.gnunet.org/libmicrohttpd.git synced 2026-09-25 04:09:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

digestauth: fixed logic of free nonce-nc slot detection

Browse Source
This commit is contained in:
Evgeny Grin (Karlson2k)
2022-05-06 11:37:23 +03:00
parent 9f226932dc
commit 05a79fdb36
1 changed files with 6 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/microhttpd/digestauth.c
+6 -5
View File
@@ -845,11 +845,8 @@ is_slot_available (const struct MHD_NonceNc *const nn,
if (0 == nn->nonce[0])
return true; /* The slot is empty */
if (0 != nn->nc)
return true; /* Client already used the nonce in this slot at least
one time, re-use the slot */
if (0 == memcmp (nn->nonce, new_nonce, new_nonce_len + 1))
if ((0 == memcmp (nn->nonce, new_nonce, new_nonce_len)) &&
(0 == nn->nonce[new_nonce_len]))
{
/* The slot has the same nonce already, the same nonce was already generated
* and used, this slot cannot be used with the same nonce as it would
@@ -857,6 +854,10 @@ is_slot_available (const struct MHD_NonceNc *const nn,
return false;
}
if (0 != nn->nc)
return true; /* Client already used the nonce in this slot at least
one time, re-use the slot */
timestamp_valid = get_nonce_timestamp (nn->nonce, 0, &timestamp);
mhd_assert (timestamp_valid);
if (! timestamp_valid)