From 7444342675a88adcd85145a702c222b71064466c Mon Sep 17 00:00:00 2001
From: Daniel Stenberg <daniel@haxx.se>
Date: Mon, 26 Feb 2007 22:03:01 +0000
Subject: [PATCH] Jose Kahan pointed out a Digest server that provided the
algorith last in the header line without quotes and with a CRLF immediately
following...
---
lib/http_digest.c | 4 ++--
1 file changed, 2 insertions(+), 2 deletions(-)
diff --git a/lib/http_digest.c b/lib/http_digest.c
index c223784f9..604655f04 100644
--- a/lib/http_digest.c
+++ b/lib/http_digest.c
@@ -101,8 +101,8 @@ CURLdigest Curl_input_digest(struct connectdata *conn,
if((2 == sscanf(header, "%31[^=]=\"%127[^\"]\"",
value, content)) ||
/* try the same scan but without quotes around the content but don't
- include the possibly trailing comma */
- (2 == sscanf(header, "%31[^=]=%127[^,]",
+ include the possibly trailing comma, newline or carriage return */
+ (2 == sscanf(header, "%31[^=]=%127[^\r\n,]",
value, content)) ) {
if(strequal(value, "nonce")) {
d->nonce = strdup(content);
--
2.40.0