mirrors/libmicrohttpd
2
0
Fork 0
mirror of https://git.gnunet.org/libmicrohttpd.git synced 2026-09-25 04:09:31 +03:00
Code Issues Packages Projects Releases Wiki Activity

digest_auth_check(): added check for too large realm value

Browse Source
This commit is contained in:
Evgeny Grin (Karlson2k)
2022-07-25 16:20:49 +03:00
parent 7e5206cc03
commit 961635da2a
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/microhttpd/digestauth.c
+3
View File
@@ -1973,6 +1973,9 @@ digest_auth_check_all_inner (struct MHD_Connection *connection,
if (NULL == params->realm.value.str)
return MHD_DAUTH_WRONG_HEADER;
else if (((NULL == digest) || params->userhash) &&
(_MHD_AUTH_DIGEST_MAX_PARAM_SIZE < params->realm.value.len))
return MHD_DAUTH_TOO_LARGE; /* Realm is too large and it will be used in hash calculations */
if (NULL == params->nc.value.str)
return MHD_DAUTH_WRONG_HEADER;