altarch-user / rpms / httpd

Forked from rpms/httpd 2 years ago
Clone

Blame SOURCES/httpd-2.4.6-CVE-2017-9788.patch

008793
diff --git a/modules/aaa/mod_auth_digest.c b/modules/aaa/mod_auth_digest.c
008793
index 0ff47f7..cbb4434 100644
008793
--- a/modules/aaa/mod_auth_digest.c
008793
+++ b/modules/aaa/mod_auth_digest.c
008793
@@ -956,13 +956,13 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
008793
 
008793
         /* find value */
008793
 
008793
+        vv = 0;
008793
         if (auth_line[0] == '=') {
008793
             auth_line++;
008793
             while (apr_isspace(auth_line[0])) {
008793
                 auth_line++;
008793
             }
008793
 
008793
-            vv = 0;
008793
             if (auth_line[0] == '\"') {         /* quoted string */
008793
                 auth_line++;
008793
                 while (auth_line[0] != '\"' && auth_line[0] != '\0') {
008793
@@ -981,8 +981,8 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
008793
                     value[vv++] = *auth_line++;
008793
                 }
008793
             }
008793
-            value[vv] = '\0';
008793
         }
008793
+        value[vv] = '\0';
008793
 
008793
         while (auth_line[0] != ',' && auth_line[0] != '\0') {
008793
             auth_line++;