allow no user and no passwd when doing basic auth

diff --git a/lib/http.c b/lib/http.c
index 9e2196ab288bedfa2de1ef667386de25380b329a..95e06ecf86d7f6489c7ca78775a524f3c6229e75 100644 (file)
--- a/lib/http.c
+++ b/lib/http.c
@@ -125,7 +125,9 @@ static CURLcode Curl_output_basic(struct connectdata *conn)
   char *authorization;
   struct SessionHandle *data=conn->data;
 
-  sprintf(data->state.buffer, "%s:%s", conn->user, conn->passwd);
+  sprintf(data->state.buffer, "%s:%s",
+          conn->user?conn->user:"",
+          conn->passwd?conn->passwd:"");
   if(Curl_base64_encode(data->state.buffer, strlen(data->state.buffer),
                         &authorization) >= 0) {
     if(conn->allocptr.userpwd)