arrfab / rpms / httpd

Forked from rpms/httpd 5 years ago
Clone

Blame SOURCES/httpd-2.4.6-CVE-2017-9788.patch

749353
diff --git a/modules/aaa/mod_auth_digest.c b/modules/aaa/mod_auth_digest.c
749353
index 0ff47f7..cbb4434 100644
749353
--- a/modules/aaa/mod_auth_digest.c
749353
+++ b/modules/aaa/mod_auth_digest.c
749353
@@ -956,13 +956,13 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
749353
 
749353
         /* find value */
749353
 
749353
+        vv = 0;
749353
         if (auth_line[0] == '=') {
749353
             auth_line++;
749353
             while (apr_isspace(auth_line[0])) {
749353
                 auth_line++;
749353
             }
749353
 
749353
-            vv = 0;
749353
             if (auth_line[0] == '\"') {         /* quoted string */
749353
                 auth_line++;
749353
                 while (auth_line[0] != '\"' && auth_line[0] != '\0') {
749353
@@ -981,8 +981,8 @@ static int get_digest_rec(request_rec *r, digest_header_rec *resp)
749353
                     value[vv++] = *auth_line++;
749353
                 }
749353
             }
749353
-            value[vv] = '\0';
749353
         }
749353
+        value[vv] = '\0';
749353
 
749353
         while (auth_line[0] != ',' && auth_line[0] != '\0') {
749353
             auth_line++;