http: fix the auth check

It used the wrong variable.

Follow-up to d1fc1c4a854d5cc809cc4ae59a9511900228023a
Pointed-out-by: qhill on github
Ref: https://github.com/curl/curl/pull/16406#pullrequestreview-2632734134
Closes #16419

diff --git a/lib/http.c b/lib/http.c
index 4bbe827a1d9132863c7eaaa389b53671d326d271..86e252118438e9d56db03a65cfc27e2dc9c61bbc 100644 (file)
--- a/lib/http.c
+++ b/lib/http.c
@@ -880,7 +880,7 @@ static bool authcmp(const char *auth, const char *line)
 {
   /* the auth string must not have an alnum following */
   size_t n = strlen(auth);
-  return strncasecompare(auth, line, n) && !ISALNUM(auth[n]);
+  return strncasecompare(auth, line, n) && !ISALNUM(line[n]);
 }
 #endif