[libmicrohttpd] 01/04: digestauth: reject invalid 'nc' value

[gnunet]

This is an automated email from the git hooks/post-receive script.

karlson2k pushed a commit to branch master
in repository libmicrohttpd.

commit 8c901963d7838497cc49e8f66aae48e8f7e33bff
Author: Evgeny Grin (Karlson2k) <k2k@narod.ru>
AuthorDate: Mon Jan 31 14:19:33 2022 +0300

    digestauth: reject invalid 'nc' value
---
 src/microhttpd/digestauth.c | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/src/microhttpd/digestauth.c b/src/microhttpd/digestauth.c
index e0a26b30..a3244188 100644
--- a/src/microhttpd/digestauth.c
+++ b/src/microhttpd/digestauth.c
@@ -1010,6 +1010,14 @@ digest_auth_check_all (struct MHD_Connection *connection,
 #endif
     return MHD_NO;   /* invalid nonce format */
   }
+  if (0 == nci)
+  {
+#ifdef HAVE_MESSAGES
+    MHD_DLOG (daemon,
+              _ ("Authentication failed, invalid 'nc' value.\n"));
+#endif
+    return MHD_NO;   /* invalid nc value */
+  }
 
   /*
    * Checking if that combination of nonce and nc is sound

-- 
To stop receiving notification emails like this one, please contact
gnunet@gnunet.org.