Commit 74443426 authored by Daniel Stenberg's avatar Daniel Stenberg
Browse files

Jose Kahan pointed out a Digest server that provided the algorith last in the 

header line without quotes and with a CRLF immediately following...
parent ee1235a7

lib/http_digest.c

+2 −2
Original line number Diff line number Diff line
@@ -101,8 +101,8 @@ CURLdigest Curl_input_digest(struct connectdata *conn, 
      if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"",

                      value, content)) ||

         /* try the same scan but without quotes around the content but don't

            include the possibly trailing comma */

         (2 ==  sscanf(header, "%31[^=]=%127[^,]",

            include the possibly trailing comma, newline or carriage return */

         (2 ==  sscanf(header, "%31[^=]=%127[^\r\n,]",

                       value, content)) ) {

        if(strequal(value, "nonce")) {

          d->nonce = strdup(content);