Fixed check for URL match to handle URLs with binary zero

2026-09-25 04:09:31 +03:00 · 2022-06-22 20:58:44 +03:00
parent c4246b5251
commit 1efb758b79
1 changed files with 5 additions and 5 deletions
@@ -1801,11 +1801,11 @@ digest_auth_check_all_inner (struct MHD_Connection *connection,
        *qmark = '\0';

      /* Need to unescape URI before comparing with connection->url */
-      daemon->unescape_callback (daemon->unescape_callback_cls,
-                                 connection,
-                                 uri);
-      if (0 != strcmp (uri,
-                       connection->url))
+      uri_len = daemon->unescape_callback (daemon->unescape_callback_cls,
+                                           connection,
+                                           uri);
+      if ((uri_len != connection->url_len) ||
+          (0 != memcmp (uri, connection->url, uri_len)))
      {
 #ifdef HAVE_MESSAGES
        MHD_DLOG (daemon,